A bill (H.R. 744) that would have prohibited the use of spyware passed the House of Representatives but stalled after being referred to the Senate Judiciary Committee. The bill would have prohibited intentionally copying a program onto a computer to commit a crime or to obtain or transmit personal information with the intent to defraud or injure another person or to cause damage to another’s computer. The bill would have provided exemptions for investigations by a law enforcement agency or a U.S. intelligence agency. The bill did not include an exemption for private security investigations.
In Information Security Governance Simplified, author Todd Fitzgerald provides an excellent overview on how security managers can create an effective information security program without breaking the bank. He shows the reader how to create a governance program that includes all of the necessary managerial, technical, and operational controls.