DoD Instruction 8500.2, DCID 6/3, DoD’s policies on use of mobile code and open
source software, and policies mandated by Federal laws, such as the Sarbanes-Oxley
Act, the FISMA, and the Healthcare Information Portability and Accountability Act
(HIPAA). (Otherlegislation that may be relevant is listed in Section 6.4.)