Authority Main Cyber Standards and Regulations

ISO/IEC 27004:2016 Information technology — Security techniques — Information security management — Monitoring, measurement, analysis and evaluation

December 1, 2016February 28, 2026
MN - Monitoring, ISO/IEC, Cross-Sector, INT, Standard, Organization

ISO/IEC 27004 is an international standard that provides guidelines for monitoring, measuring, analyzing, and evaluating the performance and effectiveness of an Information Security Management System (ISMS) based on ISO/IEC 27001.… Read More »ISO/IEC 27004:2016 Information technology — Security techniques — Information security management — Monitoring, measurement, analysis and evaluation

CSA Big Data Security and Privacy Handbook

August 26, 2016February 28, 2026
Cross-Sector, DS - Data Security, US, Standard, PR - Protect, Organization, CSA

The CSA Big Data Security and Privacy Handbook provides a comprehensive guide to best practices for securing and protecting privacy in big data environments. Structured around the top 10 challenges… Read More »CSA Big Data Security and Privacy Handbook

EU Regulation 2016/679 General Data Protection Regulation (GDPR)

May 4, 2016February 28, 2026
Cross-Sector, Government, EU, Law / Regulation, DS - Data Security, EU

The General Data Protection Regulation (GDPR) mandates that organizations processing personal data must implement appropriate technical and organizational measures to ensure cybersecurity proportional to the risks involved. Key cybersecurity requirements… Read More »EU Regulation 2016/679 General Data Protection Regulation (GDPR)

US Federal Information Security Modernization Act of 2014 (FISMA)

March 18, 2014March 6, 2026
US Govt, Government, GV - Govern, Law / Regulation, US

FISMA is a critical U.S. federal law that defines a comprehensive framework for protecting government information, operations, and assets against natural or man-made threats. It mandates that federal agencies develop,… Read More »US Federal Information Security Modernization Act of 2014 (FISMA)

CSA Zero Trust Standard Library

January 1, 2014March 13, 2026
Cross-Sector, AC - Access Control, Standard, PR - Protect, Authorization, US, Organization, CSA

The Cloud Security Alliance (CSA), recognized as a pioneer in the field of Zero Trust, has developed the CSA Zero Trust Library as a comprehensive resource hub to guide organizations… Read More »CSA Zero Trust Standard Library

NIST SP 800-30 Rev. 1 Guide for Conducting Risk Assessments

September 1, 2012February 28, 2026
NIST, Cross-Sector, RA - Risks Asst, Agency, US, Standard

NIST Special Publication 800-30, titled “Guide for Conducting Risk Assessments,” provides comprehensive guidance for organizations to conduct risk assessments of federal information systems and organizations. The publication outlines a structured… Read More »NIST SP 800-30 Rev. 1 Guide for Conducting Risk Assessments

Federal Risk and Authorization Management Program (FedRAMP)

December 8, 2011March 6, 2026
Cross-Sector, Government, Cloud, US Govt, Law / Regulation, PR - Protect, US, IR - Infrastructure

FedRAMP is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services used by U.S. federal agencies. It eliminates redundant… Read More »Federal Risk and Authorization Management Program (FedRAMP)

NIST SP 800-39 Managing Information Security Risk: Organization, Mission, and Information System View

March 1, 2011March 4, 2026
NIST, Cross-Sector, ID - Identify, RA - Risks Asst, US, Standard

NIST SP 800-39 serves as the overarching flagship for information security risk management, providing the high-level governance necessary to align cybersecurity efforts with an organization’s core mission and business objectives.… Read More »NIST SP 800-39 Managing Information Security Risk: Organization, Mission, and Information System View

MITRE CVE (Common Vulnerabilities and Exposures)

January 1, 2006February 28, 2026
Cross-Sector, Vulns, ID - Identify, RA - Risks Asst, US, Organization, Tool, MITRE

MITRE’s Common Weakness Enumeration (CWE) is a community-developed, comprehensive list and classification taxonomy of common software and hardware weaknesses that can lead to security vulnerabilities. It identifies and describes these… Read More »MITRE CVE (Common Vulnerabilities and Exposures)

US DOD Security Technical Implementation Guides (STIGs)

October 20, 2002February 28, 2026
Cross-Sector, DOD, Government, US, Standard, PR - Protect, IR - Infrastructure

Security Technical Implementation Guides (STIGs) are detailed, prescriptive documents developed by the Defense Information Systems Agency (DISA) that define standardized security configurations and requirements for specific platforms, software, and network… Read More »US DOD Security Technical Implementation Guides (STIGs)