US Main Cyber Standards and Regulations

NIST SP 800-37 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy

December 1, 2018March 4, 2026
OC - Org. Context, NIST, Cross-Sector, GV - Govern, Agency, US, Standard

NIST Special Publication 800-37, Revision 2, titled “Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy,” provides comprehensive guidelines for applying the… Read More »NIST SP 800-37 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy

CSA Big Data Security and Privacy Handbook

August 26, 2016February 28, 2026
Cross-Sector, DS - Data Security, US, Standard, PR - Protect, Organization, CSA

The CSA Big Data Security and Privacy Handbook provides a comprehensive guide to best practices for securing and protecting privacy in big data environments. Structured around the top 10 challenges… Read More »CSA Big Data Security and Privacy Handbook

CSA Zero Trust Standard Library

January 1, 2014March 13, 2026
Cross-Sector, AC - Access Control, US, Standard, PR - Protect, Authorization, Organization, CSA

The Cloud Security Alliance (CSA), recognized as a pioneer in the field of Zero Trust, has developed the CSA Zero Trust Library as a comprehensive resource hub to guide organizations… Read More »CSA Zero Trust Standard Library

NIST SP 800-30 Rev. 1 Guide for Conducting Risk Assessments

September 1, 2012February 28, 2026
NIST, Cross-Sector, RA - Risks Asst, Agency, US, Standard

NIST Special Publication 800-30, titled “Guide for Conducting Risk Assessments,” provides comprehensive guidance for organizations to conduct risk assessments of federal information systems and organizations. The publication outlines a structured… Read More »NIST SP 800-30 Rev. 1 Guide for Conducting Risk Assessments

NIST SP 800-39 Managing Information Security Risk: Organization, Mission, and Information System View

March 1, 2011March 4, 2026
NIST, Cross-Sector, ID - Identify, RA - Risks Asst, Standard, US

NIST SP 800-39 serves as the overarching flagship for information security risk management, providing the high-level governance necessary to align cybersecurity efforts with an organization’s core mission and business objectives.… Read More »NIST SP 800-39 Managing Information Security Risk: Organization, Mission, and Information System View

US DOD Security Technical Implementation Guides (STIGs)

October 20, 2002February 28, 2026
DOD, Government, Cross-Sector, Standard, PR - Protect, US, IR - Infrastructure

Security Technical Implementation Guides (STIGs) are detailed, prescriptive documents developed by the Defense Information Systems Agency (DISA) that define standardized security configurations and requirements for specific platforms, software, and network… Read More »US DOD Security Technical Implementation Guides (STIGs)

CIS Benchmarks ★★★★★

January 1, 2000February 28, 2026
Cross-Sector, US, CIS, Standard, PR - Protect, Organization, IR - Infrastructure

CIS Benchmarks are comprehensive, consensus-driven security guidelines developed by the Center for Internet Security to help organizations securely configure a wide range of IT systems, including operating systems, cloud environments,… Read More »CIS Benchmarks ★★★★★

US

United States of America