Loading...
Fact-based overviews of the regulations, standards, and certifications shaping cybersecurity. Every data point sourced from official authorities.
8
Frameworks Covered
4
Jurisdictions
100%
Officially Sourced
General Data Protection Regulation
EU data protection regulation with extraterritorial scope. Applies to any organisation processing EU residents' personal data.
Digital Operational Resilience Act
ICT risk management framework for financial entities. Covers incident reporting, resilience testing, and third-party risk.
Network and Information Security Directive
Cybersecurity obligations for essential and important entities across 18 sectors. Introduces management liability.
Health Insurance Portability and Accountability Act
Federal statute protecting health information. Privacy Rule, Security Rule, and Breach Notification Rule.
Payment Card Industry Data Security Standard
Payment card data security across 12 requirements and 6 goals. Version 4.0.1 is the current standard.
Information Security Management System
International standard for information security management. 93 Annex A controls organised in 4 themes.
System and Organization Controls 2
AICPA Trust Services Criteria for service organisations. Type I and Type II reports covering security, availability, and more.
Cybersecurity Maturity Model Certification
Cybersecurity maturity for defence contractors. Three levels based on NIST SP 800-171 requirements.
Regulations, standards, and certifications serve different purposes. Understanding the distinction is key to building an effective compliance programme.
Legally binding requirements issued by governments. Regulations apply directly; directives must be transposed into national law. Non-compliance carries fines and legal consequences.
Voluntary frameworks published by recognised bodies defining best practices. Adoption is market-driven — often required by customers, partners, or insurers rather than law.
Third-party validated compliance assessments. An independent auditor verifies that controls meet defined criteria, providing assurance to customers and stakeholders.
Read our in-depth article on the differences between regulations, directives, certifications, and standards — with official sources for every claim.
Whether you're mapping your obligations or preparing for audit, our team helps you turn framework requirements into actionable security programmes.