The AICPA SOC 2 Trust Services Principles and Criteria, outlined in TSP Section 100 (2017, regularly updated), provide a comprehensive framework for evaluating and reporting on a service organization’s controls… Read More »AICPA SOC2 Trust Services Principles and Criteria – TSP Section 100
NIST Special Publication 800-82 Revision 3, titled “Guide to Operational Technology (OT) Security,” provides comprehensive guidance on securing operational technology systems, which include a wide range of programmable devices and… Read More »NIST SP 800-82 Rev. 3 Guide to Operational Technology (OT) Security
This regulation requires public companies to enhance and standardize their disclosures regarding cybersecurity to provide investors with more consistent and decision-useful information. It mandates two primary types of reporting: the… Read More »Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure (Final Rule; Release No. 33-11216)
The Secure AI Framework (SAIF), developed by Google, is a comprehensive set of guidelines and best practices aimed at ensuring the security, privacy, and integrity of artificial intelligence (AI) systems… Read More »Google Secure AI Framework (SAIF) ★★★★★
BSI Standard 200-4 focuses on establishing and maintaining an effective Business Continuity Management System (BCMS), providing a structured methodology for organizations to ensure critical business processes remain functional during and… Read More »BSI Standard 200-4: Business Continuity Management (BCM)
The Cross-Sector Cybersecurity Performance Goals (CPGs) document provides a concise, prioritized set of cybersecurity objectives designed to help organizations across various critical infrastructure sectors enhance their cyber resilience. It outlines… Read More »CISA CPG Cross-Sector Cybersecurity Performance Goals
The EU NIS 2 Directive, formally known as Directive (EU) 2022/2555, establishes a unified legal framework to enhance cybersecurity across the European Union by setting stricter and more comprehensive requirements… Read More »EU Directive 2022/2555 Network and Information Security Directive (NIS2)
ISO/IEC 27005 is an international standard that provides comprehensive guidelines for information security risk management, forming a key part of the ISO/IEC 27000 family of standards. It outlines a structured… Read More »ISO/IEC 27005:2022 Information security, cybersecurity and privacy protection — Guidance on managing information security risks ★★★★★
ISO 27001 is an internationally recognized standard that provides a comprehensive framework for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS) within any organization. Its primary goal… Read More »ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection — Information security management systems — Requirements
The CIS Software Supply Chain Security Guide, developed in collaboration with Aqua Security, offers over 100 foundational security recommendations aimed at safeguarding the software supply chain across various technologies and… Read More »CIS Software Supply Chain Security Guide