ISO 27001 is an information security management system (ISMS) that helps keep consumer data safe.

ISO 27002 provides guidelines for applying ISO 27001 effectively and improving your information security practices.

PCI DSS ensures secure handling of cardholder data by organizations to protect against data breaches and fraud.

GDPR is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area.

SOC 2 defines criteria for managing data based on: security, availability, processing integrity, confidentiality, and privacy.

NIST is the set of cybersecurity activities and desired outcomes common across any critical infrastructure sector.

HIPAA is a U.S. regulation that ensures the security and privacy of healthcare information, applicable to healthcare providers and related organizations.

FEDRAMP is a U.S. government framework for assessing and authorizing cloud service providers to ensure they meet strict security requirements.

CMMC is a framework introduced by the U.S. Department of Defense to ensure cybersecurity practices in the defense supply chain.

COBIT is a framework for IT governance and management, helping organizations align IT goals with business objectives while mitigating risks.

CIS Controls are a prioritized set of cybersecurity best practices, helping organizations defend against common threats through actionable steps.

SOX (Sarbanes-Oxley Act) is a U.S. law that focuses on financial data security and governance, with IT-related sections emphasizing the protection of electronic records.