A wide range of documents provides universally applicable guidance and requirements for organizations across industries. These include laws and regulations like the General Data Protection Regulation and NIS2 Directive, standards such as ISO/IEC 27001, frameworks like the NIST Cybersecurity Framework, practical guidelines from authorities such as European Union Agency for Cybersecurity, contractual obligations, mapping documents reconciling multiple issuers, and tools—online or downloadable—that help operationalize these requirements. Their broad applicability across sectors ensures organizations can implement consistent, auditable cybersecurity practices that meet both legal obligations and industry-agnostic best practices.
The NIST Cyber AI Profile offers a structured approach to integrating AI into cybersecurity operations. It provides guidance on leveraging AI for threat detection, risk assessment, and automated response while… Read More »NIST IR 8596 Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile): NIST Community Profile ★★★★★
NIST SP 800-18 Revision 2, “Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems,” provides a structured framework for creating comprehensive security plans for federal information systems,… Read More »NIST SP 800-18 Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems
The OWASP Top 10 for Large Language Model (LLM) Applications is a community-driven list identifying the most critical security risks specific to LLMs and generative AI systems. It highlights vulnerabilities… Read More »OWASP Top 10 for Large Language Model Applications
The EU AI Act is the first comprehensive legal framework regulating artificial intelligence in Europe, designed to foster trustworthy AI while protecting fundamental rights, safety, and ethical principles. It classifies… Read More »EU Regulation 2024/1689 Artificial Intelligence Act (AI Act)
NIST CSF 2.0 is the updated National Institute of Standards and Technology Cybersecurity Framework, released in 2024 to help organizations of all types manage and reduce cybersecurity risks through a… Read More »NIST CSF 2.0 Cybersecurity Framework ★★★★★
NIST Interagency Report (IR) 8477, titled “Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines,” outlines a structured approach for mapping and documenting the relationships between elements-such as controls, requirements,… Read More »NIST IR 8477 Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines
The AICPA SOC 2 Trust Services Principles and Criteria, outlined in TSP Section 100 (2017, regularly updated), provide a comprehensive framework for evaluating and reporting on a service organization’s controls… Read More »AICPA SOC2 Trust Services Principles and Criteria – TSP Section 100
The Secure AI Framework (SAIF), developed by Google, is a comprehensive set of guidelines and best practices aimed at ensuring the security, privacy, and integrity of artificial intelligence (AI) systems… Read More »Google Secure AI Framework (SAIF) ★★★★★
The Cross-Sector Cybersecurity Performance Goals (CPGs) document provides a concise, prioritized set of cybersecurity objectives designed to help organizations across various critical infrastructure sectors enhance their cyber resilience. It outlines… Read More »CISA CPG Cross-Sector Cybersecurity Performance Goals
ISO 27001 is an internationally recognized standard that provides a comprehensive framework for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS) within any organization. Its primary goal… Read More »ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection — Information security management systems — Requirements