Frameworks
CMMC L3
CMMC Level 3 is the Department of Defense's mandatory cybersecurity standard for contractors handling Controlled Unclassified Information (CUI). It requires full implementation of all 110 security controls outlined in NIST SP 800-171 across 14 distinct domains.
PCI DSS 4.0.1
PCI DSS v4.0.1 is a global security standard designed to protect cardholder data and secure payment environments through requirements focused on access control, encryption, vulnerability management, monitoring, and security governance.
EU AI Act
The AI Act is a European regulation on artificial intelligence (AI) – the first comprehensive regulation on AI by a major regulator anywhere.
ECC 2
Essential Cybersecurity Controls NCA ECC-2:2024 is a cybersecurity framework released by Saudi Arabia's National Cybersecurity Authority (NCA) to establish minimum security requirements for organizations in the Kingdom.
SOC 2 Type 2
SOC 2 Type 2 is a rigorous framework designed by Certified Public Accountants (AICPA). It is an auditing standard that evaluates the operational effectiveness of an organization’s internal controls.
AZRamp (Level 3)
The Arizona Risk and Authorization Management Program (AZRAMP) is a security framework used by the State of Arizona to vet and authorize cloud service products. It is modeled after the Federal Risk and Authorization Management Program (FedRAMP) to ensure third-party vendors meet strict NIST-based da...
Saudi Arabia NCA ECC – 2: 2024
Essential Cybersecurity Controls NCA ECC-2:2024 is a cybersecurity framework released by Saudi Arabia's National Cybersecurity Authority (NCA) to establish minimum security requirements for organizations in the Kingdom.
HECVAT 4.02
HECVAT is a standardized questionnaire used by colleges and universities to evaluate the security and privacy of third-party vendors and their solutions.
COPPA
The Children's Online Privacy Protection Act (COPPA) is a U.S. law that gives parents control over personal information collected from children under 13. It requires child-directed websites and online services, or any service knowingly collecting data from children, to post a clear privacy policy, o...