These apply in the US: If the government agency takes money online, PCI compliance (http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard h

These apply in the US: If the government agency takes money online, PCI compliance (http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Secu...) FIMSA: http://en.wikipedia.org/wiki/Federal_Information_Security_Management_Act_of_2002 http://en.wikipedia.org/wiki/Federal_Information_Security_Ma... FIPS 140-2: http://en.wikipedia.org/wiki/FIPS_140-2 http://en.wikipedia.org/wiki/FIPS_140-2