The U.S. Government has been regulating Information Technology within the private sector for years. There are compliance laws such as Massachusetts’ 201 CMR 17 and the HIPPA Act of 1996 that outline how companies and organizations are supposed to store personal information of their employees and their customers/clients. However, our own government recently failed a security audit for failing to keep their systems updated in a timely manner.