US Main Cyber Standards and Regulations

NIST SP 800-221 Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio

November 1, 2023March 4, 2026
NIST, Cross-Sector, RA - Risks Asst, ID - Identify, US, Standard

NIST SP 800-221 serves as the critical functional bridge between enterprise-level strategy and technical delivery, focusing on the Enterprise Impact of Information and Communications Technology (ICT) Risk. It moves beyond… Read More »NIST SP 800-221 Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio

CISA Stop Ransomware Guide ★★★★★

October 1, 2023February 28, 2026
Cross-Sector, RA - Risks Asst, CISA, Agency, ID - Identify, Controls, US, Standard

The CISA #StopRansomware Guide is a comprehensive, one-stop resource designed to help organizations prevent, detect, respond to, and recover from ransomware and data extortion incidents. Developed collaboratively by CISA, the… Read More »CISA Stop Ransomware Guide ★★★★★

NIST SP 800-82 Rev. 3 Guide to Operational Technology (OT) Security

September 28, 2023February 28, 2026
NIST, Cross-Sector, Agency, US, Standard, PR - Protect, IR - Infrastructure

NIST Special Publication 800-82 Revision 3, titled “Guide to Operational Technology (OT) Security,” provides comprehensive guidance on securing operational technology systems, which include a wide range of programmable devices and… Read More »NIST SP 800-82 Rev. 3 Guide to Operational Technology (OT) Security

Google Secure AI Framework (SAIF) ★★★★★

July 1, 2023March 13, 2026
OC - Org. Context, Cross-Sector, GV - Govern, US, Standard, Google, Company

The Secure AI Framework (SAIF), developed by Google, is a comprehensive set of guidelines and best practices aimed at ensuring the security, privacy, and integrity of artificial intelligence (AI) systems… Read More »Google Secure AI Framework (SAIF) ★★★★★

CISA CPG Cross-Sector Cybersecurity Performance Goals

May 1, 2023February 28, 2026
GV - Govern, OC - Org. Context, Cross-Sector, Agency, CISA, US, Standard

The Cross-Sector Cybersecurity Performance Goals (CPGs) document provides a concise, prioritized set of cybersecurity objectives designed to help organizations across various critical infrastructure sectors enhance their cyber resilience. It outlines… Read More »CISA CPG Cross-Sector Cybersecurity Performance Goals

CIS Software Supply Chain Security Guide

August 21, 2022March 6, 2026
Cross-Sector, SoFa, PS - Platform, US, CIS, Standard, PR - Protect, Organization

The CIS Software Supply Chain Security Guide, developed in collaboration with Aqua Security, offers over 100 foundational security recommendations aimed at safeguarding the software supply chain across various technologies and… Read More »CIS Software Supply Chain Security Guide

NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations

May 1, 2022February 28, 2026
NIST, Cross-Sector, GV - Govern, Agency, Standard, SC - TPRM, US

NIST SP 800-161 Rev. 1, titled “Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations,” offers comprehensive guidance for organizations to identify, assess, and mitigate cybersecurity risks across their… Read More »NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations

CIS Controls Cloud Companion Guide v8

March 25, 2022March 6, 2026
Cloud, Cross-Sector, Framework, RA - Risks Asst, ID - Identify, US, CIS, Controls, PR - Protect, IR - Infrastructure, Organization

The CIS Controls Cloud Companion Guide v8 provides detailed guidance on applying the security best practices from CIS Controls version 8 to cloud environments from the consumer or customer perspective.… Read More »CIS Controls Cloud Companion Guide v8

MicroSoft Zero Trust Maturity Questionnaire

March 1, 2022March 13, 2026
AC - Access Control, Cross-Sector, US, Standard, PR - Protect, Authorization, Microsoft, Company

The Zero Trust Maturity Questionnaire is designed to help organizations evaluate their current level of Zero Trust implementation across key security domains. It assesses maturity in areas such as identities,… Read More »MicroSoft Zero Trust Maturity Questionnaire

OWASP Top 10 CI/CD Security Risks

March 1, 2022March 6, 2026
Cross-Sector, SoFa, Standard, PR - Protect, PS - Platform, US, OWASP

This community-led framework identifies the most critical security risks inherent in Continuous Integration and Continuous Deployment (CI/CD) ecosystems, which have become prime targets for supply chain attacks. It provides a… Read More »OWASP Top 10 CI/CD Security Risks

US

United States of America