A wide range of documents provides universally applicable guidance and requirements for organizations across industries. These include laws and regulations like the General Data Protection Regulation and NIS2 Directive, standards such as ISO/IEC 27001, frameworks like the NIST Cybersecurity Framework, practical guidelines from authorities such as European Union Agency for Cybersecurity, contractual obligations, mapping documents reconciling multiple issuers, and tools—online or downloadable—that help operationalize these requirements. Their broad applicability across sectors ensures organizations can implement consistent, auditable cybersecurity practices that meet both legal obligations and industry-agnostic best practices.
The CIS Controls Internet of Things (IoT) Companion Guide provides detailed guidance on how to apply the cybersecurity best practices of the CIS Controls, particularly Version 8.1, to IoT environments.… Read More »CIS Controls Internet of Things Companion Guide ★★★★★
The “Ransomware Risk Management: A Cybersecurity Framework 2.0 Community Profile” is a NIST publication that provides organizations with a practical guide to managing ransomware risks using the updated NIST Cybersecurity… Read More »NIST IR 8374 Rev. 1 Ransomware Risk Management: A Cybersecurity Framework 2.0 Community Profile
The HITRUST Cybersecurity Framework (CSF) is a comprehensive, certifiable security and privacy framework designed to help organizations manage cyber risk and meet regulatory compliance requirements effectively. It harmonizes and integrates… Read More »HITRUST Cybersecurity Framework CSF
CIS Critical Security Controls v8 (CIS CSC v8) is a comprehensive cybersecurity framework developed by the Center for Internet Security to help organizations defend against modern cyber threats. Version 8… Read More »CIS Critical Security Controls Version 8 ★★★★★
The CISA #StopRansomware Guide is a comprehensive, one-stop resource designed to help organizations prevent, detect, respond to, and recover from ransomware and data extortion incidents. Developed collaboratively by CISA, the… Read More »CISA Stop Ransomware Guide ★★★★★
The latest version of ISO/IEC 27002 was published on February 15, 2022. This 2022 revision replaced the previous 2013 edition and introduced significant changes including a reduction in the number… Read More »ISO/IEC 27002:2022 Information security, cybersecurity and privacy protection — Information security controls ★★★★★
NIST Special Publication 800-53 (NIST SP 800-53) provides a comprehensive catalog of security and privacy controls designed to protect federal information systems and organizations from a wide range of risks. The… Read More »NIST SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and Organizations
BSI Standard 200-2 serves as the practical implementation guide for the IT-Grundschutz methodology, providing a structured, process-oriented framework for establishing and maintaining a robust Information Security Management System (ISMS). This… Read More »BSI Standard 200-2: IT-Grundschutz Methodology