Return to Reference Architecture (RA) or Return to Appendices

Governance and Regulation are key to a successful distributed system.

Governance is the system by which entities are directed and controlled. It is concerned with structure and processes for decision-making, accountability, control and behavior at the top of an entity. Governance influences how an organization’s objectives are set and achieved, how risk is monitored and addressed and how performance is optimized”.

Regulatory Compliance is an organization's adherence to laws, regulations, guidelines, and specifications relevant to its business processes. Violations of regulatory compliance often result in legal punishment, including federal fines.

Examples of regulatory compliance laws and regulations include the Dodd-Frank Act, Payment Card Industry Data Security Standard (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA), E-Government Act, Federal Information Security Management Act (FISMA), Confidential Information Protection and Statistical Efficiency Act (CIPSEA), Sarbanes-Oxley Act (SOX), EU's General Data Protection Regulation (GDPR) California Consumer Privacy Act (CCPA), Data Protection Act 2018, and the Disaster Recovery Plan (DRP)

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-