All Frameworks

Cyber AB (CMMC)

CMMC protects the Defense Industrial Base (DIB) from frequent, complex, and dangerous cyberattacks. Compliance is mandatory.

NIST

Standards for anyone who processes, stores, or transmits potentially sensitive information for the Department of Defense.

HIPAA

To protect sensitive patient health information from being disclosed without patient consent.

ISO

Designed to secure information assets for organizations of all sizes and industries.

CCPA/CPRA

Provides California consumers with greater transparency and control over their personal information.

CFR

Guides companies on the criteria under which electronic records and signatures are considered to be trustworthy and equivalent to paper records.

CIS

Benchmark that help safeguard systems, software, and networks against today’s evolving cyber threats.

C2M2

Helps organizations evaluate their cybersecurity capabilities and optimize security investments.

FEDRAMP

Provides a standardized approach to security authorizations for Cloud Service Offerings.

FFIEC

Regulations that highlight 11 topics that encompass the priorities of financial institution operations.

FINRA

Enables investors and firms to participate in the market with confidence by safeguarding its integrity.

FISMA

Requirement for federal agencies to develop, document, and implement an information security and protection program.

GDPR

An influential European Union (EU) regulation on data protection and privacy.

GLBA

Requires companies to develop privacy practices that detail how they collect, sell, share and reuse consumer information.

NCUA

Protects the security and integrity of the credit union system by monitoring and reducing risks to the National Credit Union Share Insurance Fund.

NYDFS

The goal of NYDFS is to build a robust, equitable, transparent, and resilient financial system for New York.

PCI

Protects card issuers by ensuring that merchants meet minimum levels of security when cardholder information is stored, processed, and transmitted.

SOC 2

Voluntary compliance standard which specifies how service organizations should manage customer data.