CMMC 2.0 is a Department of Defense (DoD) framework designed to unify cybersecurity standards across the Defense Industrial Base (DIB) to protect sensitive unclassified information. It streamlines the previous version… Read More »US Cybersecurity Maturity Model Certification (CMMC) 2.0
NYDFS Part 500 is a landmark regulation that mandates strict cybersecurity standards for all financial institutions operating under New York Department of Financial Services (DFS) licensure. Unlike more general frameworks,… Read More »NYDFS Part 500
This regulation requires public companies to enhance and standardize their disclosures regarding cybersecurity to provide investors with more consistent and decision-useful information. It mandates two primary types of reporting: the… Read More »Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure (Final Rule; Release No. 33-11216)
The CCPA/CPRA represents the most comprehensive data privacy framework in the United States, granting California residents extensive rights over their personal information, including the right to know, delete, correct, and… Read More »California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA)
FISMA is a critical U.S. federal law that defines a comprehensive framework for protecting government information, operations, and assets against natural or man-made threats. It mandates that federal agencies develop,… Read More »US Federal Information Security Modernization Act of 2014 (FISMA)
FedRAMP is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services used by U.S. federal agencies. It eliminates redundant… Read More »Federal Risk and Authorization Management Program (FedRAMP)
Enacted in response to high-profile corporate scandals, SOX aims to protect investors by improving the accuracy and reliability of corporate disclosures and financial reporting. While primarily a financial regulation, it… Read More »US Sarbanes-Oxley (SOX) Act
The GLBA is a federal law that mandates financial institutions to provide customers with clear explanations of their information-sharing practices while ensuring the protection of sensitive consumer data. The Act… Read More »US Gramm-Leach-Bliley Act (GLBA)
The Health Insurance Portability and Accountability Act of 1996 (HIPAA) establishes a comprehensive cybersecurity framework designed to protect electronic protected health information (ePHI) within healthcare organizations. Central to HIPAA’s cybersecurity… Read More »Health Insurance Portability and Accountability Act of 1996 (HIPAA)