Frameworks, Standards and Regulations

Developed by the American Institute of Certified Public Accountants (AICPA), the System and Organization Controls (SOC) 2 professional standards focus on preventing the unauthorized use of assets and data.

Australian Prudential Regulation Authority supervises Australia’s banks, insurers and superannuation funds to ensure safety and soundness of depositor funds.

COSO Principles help organizations work within established industry standards to evaluate risk and ensure transparent, ethical processes.

The CSRD extends NFRD reporting requirements to include detailed reports on environmental rights, social rights, human rights, and governance factors.

The Digital Operational Resilience Act (DORA) is an EU regulation aimed at helping ensure the operational resilience of the financial sector against cyber threats and other operational risks.

ISO/IEC 27001 provides a framework for organizations—of any size, in any industry—to ensure the confidentiality, integrity, and availability of corporate data

The Maine Privacy Act requires ISPs protect customer personal information from unauthorized use, disclosure, or access.

The Nevada Privacy Act gives consumers broad rights to opt out of the sale of their personal information.

Cybersecurity Maturity Model Certification (CMMC) is the cybersecurity standard for all US defense industrial contractors

The NIST CSF consists of guidance developed by the National Institute of Standards and Technology (NIST) to help organizations manage and reduce cybersecurity risk

If your organization is part of the U.S. federal government you need to understand NIST SP 800-53, a set of guidelines governing information security and privacy

Provides a framework for all HIPAA covered entities to protect electronic protected health information

The Sarbanes-Oxley Act of 2002 mandates transparency in corporate financial recordkeeping and reporting to prevent fraud.

A new rule for U.S. companies to disclose risks and impacts caused by climate change, such as greenhouse gas emissions and other environmental risks.

The Shared Assessments Standardized Information Gathering (SIG) Questionnaire is standard set of questions to structure your compliance risk assessments of third-party vendors