Authority Documents

The CIS Critical Security Controls (CIS Controls) are a prioritized set of Safeguards to mitigate the most prevalent cyber-attacks against systems and networks. They are mapped to and referenced by multiple legal, regulatory, and policy frameworks. CIS Controls v8 has been enhanced to keep up with m

The CIS Controls®, published by The Center for Internet Security® (CIS) is a prioritized set of actions meant to help organizations enhance their security preparedness and bolster their cyber-defenses. Widely adopted both in the private and public sectors, the CIS Controls® guide organizations to a

On February 28, 2024, President Biden signed Executive Order (E.O.) 14117, Preventing Access to Americans' Bulk Sensitive Personal Data and U.S. Government-Related Data by Countries of Concern, to address national-security and foreign-policy threats that arise when countries of concern and covered p

The Cloud Controls Matrix (CCM) is a comprehensive control framework aligned with the Cloud Security Alliance's (CSA) Security Guidance for Critical Areas in Cloud Computing. Developed by CSA, the CCM serves as a framework expressly designed to aid both cloud providers and consumers in evaluating th

The HIPAA Security Rule sets national standards to protect electronic protected health information (ePHI). Its core purpose is to ensure the confidentiality, integrity, and availability of this information. It achieves this through three main types of safeguards: 1. Administrative Safeguards: Polici

International Organization for Standardization. ISO 27001:2022, Information security, cybersecurity and privacy protection — Information security management systems — Requirements, 2012, Issued by International Organization for Standardization (ISO). This document was prepared by Joint Technical Co

The NIST Cybersecurity Framework (CSF) 2.0 is a US Government resource that provides guidance for private sector organizations. The CSF helps organizations manage, understand, reduce, and communicate cybersecurity risks.

The NIST Privacy Framework (PF) is a voluntary tool developed in collaboration with stakeholders intended to help organizations identify and manage privacy risk to build innovative products and services while protecting individuals' privacy.