OWASP Top Ten ★★★★★
The OWASP Top Ten is a widely recognized list that highlights the ten most critical security risks facing web applications today. Updated every few years by security experts, the list… Read More »OWASP Top Ten ★★★★★
China Data Security Law (DSL)
The DSL serves as a fundamental pillar of China’s national security framework, regulating data processing activities across all sectors to safeguard state sovereignty and public interest. It establishes a mandatory… Read More »China Data Security Law (DSL)
CSA Cloud Controls Matrix (CCM) v4 ★★★★★
The Cloud Security Alliance Cloud Controls Matrix (CSA CCM) is a comprehensive cybersecurity control framework specifically designed for cloud computing environments. It consists of 197 control objectives organized into 17… Read More »CSA Cloud Controls Matrix (CCM) v4 ★★★★★
NIST SP 800-207 Zero Trust Architecture
NIST SP 800-207, titled “Zero Trust Architecture,” is a comprehensive guidance document from the National Institute of Standards and Technology that outlines the principles, components, and strategies for implementing Zero… Read More »NIST SP 800-207 Zero Trust Architecture
BSI Cloud Security (C5)
The BSI Cloud Computing Compliance Criteria Catalogue (C5) defines a mandatory baseline for the secure operation of cloud services, providing a transparent and verifiable framework for cloud service providers and… Read More »BSI Cloud Security (C5)
NIST Federal Information Processing Standard (FIPS) Publication 140-3: Security Requirements for Cryptographic Modules
FIPS 140-3 is a mandatory standard for federal agencies and a benchmark for the private sector that defines the security requirements for hardware and software cryptographic modules. It superseded FIPS… Read More »NIST Federal Information Processing Standard (FIPS) Publication 140-3: Security Requirements for Cryptographic Modules
ANSSI Recommendations to secure administration of IT systems
Recommendations to secure the administration of IT systems emphasize conducting a thorough risk analysis tailored to the organization’s specific environment, as administrative resources are high-value targets for attackers due to… Read More »ANSSI Recommendations to secure administration of IT systems
California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA)
The CCPA/CPRA represents the most comprehensive data privacy framework in the United States, granting California residents extensive rights over their personal information, including the right to know, delete, correct, and… Read More »California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA)
CSA Big Data Security and Privacy Handbook
The CSA Big Data Security and Privacy Handbook provides a comprehensive guide to best practices for securing and protecting privacy in big data environments. Structured around the top 10 challenges… Read More »CSA Big Data Security and Privacy Handbook
CSA Zero Trust Standard Library
The Cloud Security Alliance (CSA), recognized as a pioneer in the field of Zero Trust, has developed the CSA Zero Trust Library as a comprehensive resource hub to guide organizations… Read More »CSA Zero Trust Standard Library