NIST SP 800-53 R5 | International or National Standard | 37 | 22 | 11 |
CIS Controls, V8 | Best Practice Guideline | 31 | 7 | 7 |
ISO 27001-2013 | International or National Standard | 31 | 202 | 17 |
ISO/IEC 27001:2022 | International or National Standard | 31 | 0 | 0 |
NIST CSF 1.1 | International or National Standard | 30 | 45 | 19 |
EU General Data Protection Regulation (GDPR) | Regulation or Statute | 29 | 174 | 15 |
PCI DSS Defined Approach Requirements, Version 4.0 | International or National Standard | 22 | 8 | 3 |
ISO/IEC 27002:2022 | International or National Standard | 21 | 2 | 3 |
NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations | International or National Standard | 20 | 11 | 8 |
PCI DSS v3.2.1 | Contractual Obligation | 19 | 7 | 4 |
23 NYCRR 500 | Regulation or Statute | 18 | 16 | 3 |
NIST SP 800-53 | International or National Standard | 18 | 18 | 2 |
Sarbanes-Oxley Act of 2002 | Bill or Act | 18 | 2 | 4 |
ISO/IEC 27701:2019 | International or National Standard | 17 | 18 | 8 |
Cloud Controls Matrix, v4.0 | Self-Regulatory Body Requirement | 16 | 3 | 0 |
TSP Section 100: 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy | Self-Regulatory Body Requirement | 16 | 4 | 2 |
CobiT | Safe Harbor | 15 | 167 | 1 |
hipaa security rule | Regulation or Statute | 14 | 5 | 1 |
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 2020 | International or National Standard | 13 | 8 | 5 |
Gramm Leach Bliley | Bill or Act | 13 | 3 | 0 |
NIST SP 800-37r2 | International or National Standard | 13 | 12 | 4 |
California Privacy Rights Act (CPRA) | Bill or Act | 12 | 3 | 1 |
CIS Controls, V7.1 | Best Practice Guideline | 12 | 6 | 2 |
FedRAMP Baseline Security Controls | Audit Guideline | 12 | 129 | 0 |
PCI DSS Defined Approach Testing Procedures, Version 4.0 | International or National Standard | 12 | 6 | 4 |
California Consumer Privacy Act of 2018 | Bill or Act | 11 | 45 | 1 |
CMMC Level 2, v2.0 | Best Practice Guideline | 11 | 6 | 6 |
COSO Internal Control - Integrated Framework | Self-Regulatory Body Requirement | 11 | 15 | 7 |
HIPAA Electronic Health Record Technology | Regulation or Statute | 11 | 2 | 1 |
ISO/IEC 27002:2013(E) | International or National Standard | 11 | 144 | 13 |
FedRAMP Security Controls Baseline, 2018 | Audit Guideline | 10 | 1 | 4 |
FFIEC CAT | Best Practice Guideline | 10 | 15 | 1 |
SSAE 18 | Safe Harbor | 10 | 6 | 3 |
CIS Controls V7 | Best Practice Guideline | 9 | 25 | 2 |
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Privacy Control Baseline, October 2020 | International or National Standard | 9 | 5 | 3 |
ISO 27005 R 2011 | International or National Standard | 9 | 17 | 8 |
NIST SP 800 66 | Safe Harbor | 9 | 32 | 2 |
NIST SP 800-39 | International or National Standard | 9 | 10 | 6 |
PCI DSS v4.0 SAQ A | Self-Regulatory Body Requirement | 9 | 0 | 0 |
COBIT 2019 | Safe Harbor | 8 | 5 | 2 |
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, High Impact Baseline, October 2020 | International or National Standard | 8 | 9 | 8 |
CRI Profile v1.2 | Best Practice Guideline | 8 | 7 | 0 |
EU 8th Directive | Regulation or Statute | 8 | 3 | 0 |
ISO 27002 | International or National Standard | 8 | 8 | 3 |
ISO/IEC 27017:2015(E) | Self-Regulatory Body Requirement | 8 | 19 | 9 |
ISO/IEC 27018:2014 | International or National Standard | 8 | 20 | 2 |
NIST SP 800-53 R4 | International or National Standard | 8 | 4 | 3 |
Red Book (Condensed) | International or National Standard | 8 | 13 | 7 |
16 CFR Part 314, Standards for Safeguarding Customer Information | Regulation or Statute | 7 | 2 | 1 |
AICPA Reporting on Controls at a Service Organization SOC-2 | Safe Harbor | 7 | 143 | 4 |