COMPLIANCE STANDARDS
The EU General Data Protection Regulation (GDPR) was designed to harmonize data privacy laws across Europe, to protect and empower all EU citizens data privacy.
Health Insurance Portability and Accountability Act (HIPAA), sets the standard for protecting sensitive patient data.
International Traffic in Arms Regulations (ITAR) control the export and import of defense-related articles and services on the United States Munitions List (USML).
NYCRR 500 is a regulatory compliance standard that regulated the Financial Services Industry (FSI) in New York.
The Payment Card Industry Data Security Standard (PCI DSS) applies to companies of any size that accept credit card payments.
The Sarbanes-Oxley Act (SOX) requires all publicly held companies to establish internal controls and procedures for financial reporting to reduce the possibility of corporate fraud.
The National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) provides a policy framework of computer security guidance for how private sector organizations in the United States can assess and improve their ability to prevent, detect, and respond to cyber attacks.
The California Consumer Privacy Act of 2018 (CCPA) grants California Residents the right to know what personal information is being collected about them, who has that information, who is selling it, and the ability to prevent that sale.
