Introduction

This section consists of security standards, regulations and requirements that are known, used and implemented internationally in different types of organizations.

Compliance Frameworks

• BSIMM
• CAPEC™
• CIS
• CWE™
• ePrivacy Directive
• GDPR
• HIPAA
• ISO/IEC 27001
• NERC CIP
• NIST 800-53
• NIST 800-63B
• OWASP ASVS
• OWASP TOP 10
• PCI DSS
• SOC2®
• CWE TOP 25
• OWASP-M TOP 10
• NIST CSF
• Agile Alliance
• BIZEC-APP
• CCPA
• CPRA
• CERT-C
• CERT-J
• FCRA
• FACTA
• GLBA
• MISRA-C
• NYDFS
• NY SHIELD Act
• MITRE ATT&CK®
• PA-DSS
• SANS 25
• PDPA
• POPIA
• PDPO
• CMMC
• HITRUST CSF
• FedRAMP
• ISO/IEC 27002
• LGPD
• ISA/IEC 62443
• WASSEC
• OSSTMM3
• C2M2
• WASC
• FERPA
• NIST SSDF
• ISSAF
• PTES
• OWASP Top 10 Privacy Risks
• MVSP
• OWASP SCP
• BSAFSS
• OWASP MASVS
• NIST 800-171
• NIST 800-115
• SWIFT CSCF
• OWASP SAMM
• SIG Lite
• SIG Core
• OWASP API Security Top 10
• CASA
• Resolution SB 2021 2126
• FISMA
• OWASP Top 10 for LLM Applications