Brief descriptions of key frameworks, organised alphabetically for quick reference.
In this section
29 guidesAICPA Trust Services Criteria (SOC2)CCB CyberFundamentals Framework - SmallCCB CyberFundamentals Framework - BasicCCB CyberFundamentals Framework - ImportantCCB CyberFundamentals — EssentialCCCS – Baseline Controls for SME (v 1.2)CMMC 2.0 (Cybersecurity Maturity Model Certification v.2)DORA (Digital Operational Resilience Act)GDPR (General Data Protection Regulation)HIPAA (Health Insurance Portability and Accountability Act)IAPP CIPM (Certified Information Privacy Manager)ISO 9001:2015ISO 27001:2022ISO 42001:2023NCA CCC (Cloud Cybersecurity Controls)NCA Critical Systems Cybersecurity ControlsNCA DCC (Data Cybersecurity Controls)NCA ECC (Essential Cybersecurity Controls)NCA OSMACC (Online Social Media Account Cybersecurity Controls)NCA OTCC (Operational Technology Cybersecurity Controls)NCA TCC (Teleworking Cybersecurity Controls)NIS2 (Network and Information Security Directive 2)NIST AI 100-1 (Artificial Intelligence Risk Management Framework)NIST CSF 2.0 (Cybersecurity Framework 2.0)NIST PF 1.0 (Privacy Framework 1.0)NIST SP 800-37 (Risk Management Framework)NIST SP 800-53 rev. 5 (Security and Privacy Controls for Information Systems and Organisations)NIST SP 1300 — Small Business Quick-Start GuidePCI DSS (Payment Card Industry Data Security Standard)