COMPLIANCE STRATEGY CALLS
Find your framework, then plan the gaps with Ivanka
Pick the standard or regulation you are working towards from the 1,062 below. Each page starts with a free readiness assessment that scores your organisation against its controls, then offers a 30-minute strategy call with Ivanka Menken, co-founder of The Art of Service, to turn the scores into a plan.
#
A
- AASB 10 Consolidated Financial StatementsAustralia
- AASB 101 Presentation of Financial StatementsAustralia
- AASB 1039 Concise Financial ReportsAustralia
- AASB 1054 Australian Additional DisclosuresAustralia
- AASB 107 Statement of Cash FlowsAustralia
- AASB 121 The Effects of Changes in Foreign Exchange RatesAustralia
- AASB 18 Presentation and Disclosure in Financial StatementsAustralia
- AASB S2 Climate-related DisclosuresAustralia
- ACCME Accreditation Requirements and Standards for Integrity and Independence in Accredited Continuing EducationUnited States
- ACSC Essential EightAustralia
- ACT Child Safe Standards (Human Rights Commission Act 2005 Part 5A)Australia
- Act on the Implementation of the General Data Protection Regulation (OG 42/2018)Croatia
- ACT Residential Tenancies Act 1997Australia
- ACT Veterinary Practice Act 2018Australian Capital Territory
- ACT Workplace Privacy Act 2011Australia
- Administrative Measures for the Security Assessment of Generative AI Services (2023) and Algorithmic Recommendation Management Provisions (2022)China
- African Union Malabo ConventionAfrica
- Aged Care Act 2024 (Australia)Australia
- Aged Care Infection Prevention and Control Guide (2024)Australia
- Aged Care Quality Standards (Australia)Australia
- Aged Care Quality Standards 2019 (repealed edition)Australia
- Aged Care Serious Incident Response Scheme (SIRS) Provider GuidanceAustralia
- Ahpra Guidelines for Advertising a Regulated Health Service (December 2020)Australia
- Ahpra Shared Code of Conduct (2022)Australia
- AICPA Privacy Management Framework (PMF)United States
- AICPA SOC 3International
- Albania Law No. 124/2024 on Personal Data ProtectionAlbania
- AMIC Industry Animal Welfare Standard for Livestock Processing EstablishmentsAustralia
- AML/CTF Act 2006 (Australia)Australia
- AML/CTF Rules 2025 (Australia)Australia
- Angola Personal Data Protection Law (Law No. 22/11)Angola
- Annex 11 to EU GMP - Computerised SystemsEuropean Union
- ANSI/ASIS PAP.1-2012 Physical Asset ProtectionUnited States
- ANSI/ASIS WVPI AA-2020 Workplace Violence and Active AssailantUnited States
- ANSSI Guide d'hygiene informatique (42 mesures, v2.0)France
- APEC Cross-Border Privacy Rules (CBPR) SystemAsia-Pacific
- API 1164United States
- APPIJapan
- APRA CPS 220 Risk ManagementAustralia
- APRA CPS 230 Operational Risk ManagementAustralia
- APRA CPS 234Australia
- APRA SPS 220 Risk Management (Superannuation)Australia
- Argentina Law 25.326 (Personal Data Protection Law)Argentina
- Argyris Double-Loop LearningInternational
- Arizona Air Quality Regulations (ADEQ / ARS Title 49 / AAC Title 18 Chapter 2)Arizona, United States
- Armenia Law on Protection of Personal Data (2015)Armenia
- Article 29 Working Party Opinion 2/2017 on Data Processing at Work (WP249)European Union and EEA
- AS 1428.1:2021 Design for Access and Mobility - General Requirements for Access, New Building WorkAustralia
- AS 1684.2:2021 Residential Timber-Framed Construction - Non-Cyclonic AreasAustralia
- AS 1851:2012 Routine Service of Fire Protection Systems and EquipmentAustralia
- AS 3740:2021 Waterproofing of Domestic Wet AreasAustralia
- AS 3745-2010 Planning for Emergencies in FacilitiesAustralia
- AS 4674-2004 Design, Construction and Fit-out of Food PremisesAustralia
- AS/NZS 1891.4:2009 Industrial Fall-Arrest Systems and Devices - Selection, Use and MaintenanceAustralia and New Zealand
- AS/NZS 3000:2018 Electrical Installations (Wiring Rules)Australia and New Zealand
- AS/NZS 3010:2017 Electrical Installations Generating SetsAustralia and New Zealand
- AS/NZS 3500.1:2021 Plumbing and Drainage - Water ServicesAustralia and New Zealand
- AS/NZS 3760:2022 In-Service Safety Inspection and Testing of Electrical Equipment and RCDsAustralia and New Zealand
- AS/NZS 4801:2001 Occupational Health and Safety Management Systems (superseded edition)Australia and New Zealand
- AS/NZS 4836:2023 Safe Working on or near Low-Voltage and Extra-Low Voltage Electrical Installations and EquipmentAustralia and New Zealand
- AS9100D - Aerospace Quality Management SystemGlobal
- ASA 315 Identifying and Assessing the Risks of Material Misstatement (Australia, equivalent of ISA 315 (Revised 2019))Australia
- ASAE 3100 Compliance Engagements (AUASB, December 2022)Australia
- ASD Strategies to Mitigate Cyber Security IncidentsAustralia
- ASEAN Data Management FrameworkASEAN
- ASEAN Guide on AI Governance and EthicsASEAN
- ASHRAE 90.1-2022 (Energy Standard for Sites and Buildings Except Low-Rise Residential Buildings)United States
- ASIC Cyber Resilience Good PracticesAustralia
- ASIC Market Integrity Rules (Securities Markets) 2017 (Australia)Australia
- ASIC Regulatory Guide 166 AFS Licensing: Financial Requirements (Australia)Australia
- ASIC Regulatory Guide 209 Credit Licensing: Responsible Lending Conduct (Australia)Australia
- ASIC Regulatory Guide 274 Product Design and Distribution Obligations (Australia)Australia
- ASIS SPC.1-2009 - Organizational Resilience StandardUnited States
- ATO Digital Service Provider (DSP) Operational Security FrameworkAustralia
- Australia AI Ethics FrameworkAustralia
- Australia Commonwealth Child Safe Framework (2020)Australia
- Australia Commonwealth Procurement Rules (17 November 2025)Australia
- Australia Competition and Consumer Act 2010 Parts IV and IVA (Restrictive Trade Practices and Merger Notification)Australia
- Australia Consumer Data Right - Banking (CDR)Australia
- Australia Corporations Act 2001 (Cth)Australia
- Australia Disability Discrimination Act 1992Australia
- Australia Disability Standards for Education 2005Australia
- Australia Electrical, Electronic and Communications Contracting Award 2020 (MA000025)Australia
- Australia eSafety Commissioner - Online Safety Expectations for IndustryAustralia
- Australia Fair Work Act 2009 (Cth)Australia
- Australia Food Standards Australia New Zealand Act 1991 (Cth)Australia
- Australia Food Standards Code Standard 1.1.1 Structure of the Code and General ProvisionsAustralia and New Zealand
- Australia Food Standards Code Standard 1.2.1 Requirements to Have Labels or Otherwise Provide InformationAustralia and New Zealand
- Australia Food Standards Code Standard 1.2.10 Information Requirements Characterising Ingredients and Components of FoodAustralia and New Zealand
- Australia Food Standards Code Standard 1.2.2 Information Requirements Food IdentificationAustralia and New Zealand
- Australia Food Standards Code Standard 1.2.3 Warning Statements, Advisory Statements and DeclarationsAustralia and New Zealand
- Australia Food Standards Code Standard 1.2.4 Information Requirements Statement of IngredientsAustralia and New Zealand
- Australia Food Standards Code Standard 1.2.5 Information Requirements Date Marking of Food for SaleAustralia and New Zealand
- Australia Food Standards Code Standard 1.2.6 Information Requirements Directions for Use and StorageAustralia and New Zealand
- Australia Food Standards Code Standard 1.2.7 Nutrition, Health and Related ClaimsAustralia and New Zealand
- Australia Food Standards Code Standard 1.2.8 Nutrition Information RequirementsAustralia and New Zealand
- Australia Food Standards Code Standard 3.2.1 Food Safety ProgramsAustralia
- Australia Food Standards Code Standard 3.2.2 Food Safety Practices and General RequirementsAustralia
- Australia Food Standards Code Standard 3.2.2A Food Safety Management ToolsAustralia
- Australia Food Standards Code Standard 3.2.3 Food Premises and EquipmentAustralia
- Australia Food Standards Code Standard 3.3.1 Food Safety Programs for Food Service to Vulnerable PersonsAustralia
- Australia Franchising Code of Conduct (Franchising Regulations 2024)Australia
- Australia General Insurance Code of Practice (2020 Code as updated)Australia
- Australia General Retail Industry Award 2020 (MA000004)Australia
- Australia Guidance for AI Adoption (2025)Australia
- Australia Health Insurance (Accredited Pathology Laboratories, Approval) Principles 2017Australia
- Australia Health Practitioner Regulation National Law 2009Australia
- Australia Health Professionals and Support Services Award 2020 (MA000027)Australia
- Australia Heavy Vehicle National Law Fatigue ManagementAustralia
- Australia Hospitality Industry (General) Award 2020 (MA000009)Australia
- Australia Insurance Act 1973 (Cth)Australia
- Australia Insurance Contracts Act 1984 (Cth)Australia
- Australia IRAP - Information Security Registered Assessors ProgramAustralia
- Australia Life Insurance Code of Practice (CALI Life Code)Australia
- Australia MBS Complex Neurodevelopmental Disorder and Disability Allied Health Items 2026Australia
- Australia Model Code of Practice: Construction WorkAustralia
- Australia Model Code of Practice: Excavation WorkAustralia
- Australia Model Code of Practice: Hazardous Manual TasksAustralia
- Australia Model Code of Practice: Healthcare and Social Assistance IndustryAustralia
- Australia Model Code of Practice: How to Manage Work Health and Safety RisksAustralia
- Australia Model Code of Practice: Managing Psychosocial Hazards at WorkAustralia
- Australia Model Code of Practice: Managing Risks of Hazardous Chemicals in the WorkplaceAustralia
- Australia Model Code of Practice: Managing the Risk of Falls at WorkplacesAustralia
- Australia Model Code of Practice: Managing the Risks of Plant in the WorkplaceAustralia
- Australia Model Code of Practice: Managing the Work Environment and FacilitiesAustralia
- Australia Model Code of Practice: Safe Design of StructuresAustralia
- Australia Model Code of Practice: Work Health and Safety Consultation, Cooperation and CoordinationAustralia
- Australia Model Work Health and Safety RegulationsAustralia
- Australia My Health Records Act 2012Australia
- Australia National Boards Common Registration Standards 2026Australia
- Australia National Construction Code 2022 Volume Two (Building Code of Australia, Class 1 and 10 Buildings)Australia
- Australia National Construction Code 2025 Volume One (Building Code of Australia, Class 2 to 9 Buildings)Australia
- Australia National Construction Code 2025 Volume Three (Plumbing Code of Australia)Australia
- Australia National Construction Code 2025 Volume Two (Building Code of Australia, Class 1 and 10 Buildings)Australia
- Australia National Consumer Credit Protection Act 2009 (Cth)Australia
- Australia National Credit Code (Schedule 1 to the National Consumer Credit Protection Act 2009)Australia
- Australia National Disability Insurance Scheme Act 2013Australia
- Australia National Framework for the Assurance of AI in Government (2024)Australia
- Australia National Pathology Standards (First Edition 2027)Australia
- Australia National Principles for Child Safe Organisations (2019)Australia
- Australia National Quality Standard for Education and Care Services (ACECQA)Australia
- Australia National Safety and Quality Health Service (NSQHS) Standards Second EditionAustralia
- Australia National Vocational Education and Training Regulator Act 2011Australia
- Australia NDIS Code of Conduct Rules 2018Australia
- Australia NDIS Complaints Management and Resolution Rules 2018Australia
- Australia NDIS Incident Management and Reportable Incidents Rules 2018Australia
- Australia NDIS Practice Standards and Quality IndicatorsAustralia
- Australia NDIS Pricing Arrangements 2026-27Australia
- Australia NDIS Provider Registration Rules 2018Australia
- Australia NDIS Qualification and Professional Associations Required Documentation Guide 2025Australia
- Australia NDIS Quality and Safeguarding Framework 2016Australia
- Australia NDIS Quality Support for Children Guidance 2024Australia
- Australia NDIS Restrictive Practices and Behaviour Support Rules 2018Australia
- Australia NDIS Worker Screening Rules 2018Australia
- Australia NHMRC National Statement on Ethical Conduct in Human ResearchAustralia
- Australia Occupational Therapy Board Registration Standards 2019Australia
- Australia Online Safety Act 2021Australia
- Australia PGPA Finance Minister Delegations to Accountable Authorities and the Finance SecretaryAustralia
- Australia Physiotherapy Board Registration Standards 2016Australia
- Australia Plumbing and Fire Sprinklers Award 2020 (MA000036)Australia
- Australia Policy for the Responsible Use of AI in Government (Version 2.0)Australia
- Australia Privacy (Credit Reporting) Code 2025Australia
- Australia Psychology Board Registration Standards 2025Australia
- Australia Public Governance, Performance and Accountability Rule 2014 (PGPA Rule)Australia
- Australia R&D Tax Incentive (Income Tax Assessment Act 1997 Division 355)Australia
- Australia Reducing Scam Calls and Scam SMs Industry Code (C661:2022)Australia
- Australia Scams Prevention Framework (Competition and Consumer Act 2010 Part IVF)Australia
- Australia Social Security Act 1991 (Age Pension: qualification, income test and assets test)Australia
- Australia Spam Act 2003Australia
- Australia Standards for Registered Training Organisations 2015Australia
- Australia Standards for Registered Training Organisations 2025Australia
- Australia Standards for VET Accredited Courses 2021Australia
- Australia Superannuation Industry (Supervision) Act 1993 (Cth)Australia
- Australia Tax Agent Services Act 2009 (Cth)Australia
- Australia Telecommunications (Consumer Complaints Handling) Industry Standard 2018Australia
- Australia Telecommunications (Financial Hardship) Industry Standard 2024Australia
- Australia Telecommunications Consumer Protections Code (C628:2019, Variation 1/2022)Australia
- Australia Therapeutic Goods (Medical Devices) Regulations 2002Australia
- Australia Therapeutic Goods Act 1989Australia
- Australia Work Health and Safety Act 2011 (Cth)Australia
- Australian Animal Welfare Standards and Guidelines - Exhibited AnimalsAustralia
- Australian Animal Welfare Standards and Guidelines - GoatsAustralia
- Australian Animal Welfare Standards and Guidelines - Land Transport of LivestockAustralia
- Australian Animal Welfare Standards and Guidelines - PoultryAustralia
- Australian Consumer Law (Competition and Consumer Act 2010 Schedule 2)Australia
- Australian Copyright Act 1968 (Australia), Educational Institution ProvisionsAustralia
- Australian Dangerous Goods Code Edition 7.8 (Consignor and Transport Duties)Australia
- Australian Education Act 2013 (Australia)Australia
- Australian Education Regulations 2023 (Australia)Australia
- Australian Education Services for Overseas Students Act 2000 and National Code 2018 (Australia)Australia
- Australian Energy Sector Cyber Security Framework (AESCSF)Australia
- Australian Government Data Governance Framework (2025)Australia
- Australian Information Security ManualAustralia
- Australian Privacy Principles (APPs)Australia
- Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)Austria
- Authorised Economic Operator (AEO) Programmes - Global StandardsInternational
- Automotive SPICE (ASPICE) v4.1 - Process Assessment ModelGlobal
- Automotive SPICE for Cybersecurity PAM v2.0International
- AWS Well-Architected Security PillarInternational
- AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)United States
- Azerbaijan Law on Personal Data (2010)Azerbaijan
- Azure Security BenchmarkInternational
B
- Bahrain PDPLBahrain
- Bank Secrecy Act / Anti-Money Laundering (BSA/AML)United States
- Barbados Data Protection Act 2019Barbados
- Basel Core Principles for Effective Banking Supervision (2024)International
- Basel III International Banking FrameworkInternational
- BCBS 239International
- Belgium CyberFundamentalsBelgium
- Belgium Data Protection Act (Wet van 30 juli 2018, Loi du 30 juillet 2018)Belgium
- Bermuda Monetary Authority (BMA) Cyber Risk Management Code of ConductBermuda
- Bermuda Personal Information Protection Act 2016 (PIPA)Bermuda
- BIMCO Cyber SecurityInternational
- Bosnia and Herzegovina Law on Protection of Personal Data (2006, amended 2011)Bosnia and Herzegovina
- Botswana Data Protection Act (2024)Botswana
- Brazil AI FrameworkBrazil
- Brazil Open Finance (Resolução Conjunta No. 1/2020)Brazil
- BRCGS Global Standard for Food Safety Issue 9International
- BREEAM - Building Research Establishment Environmental Assessment MethodInternational
- Brunei Personal Data Protection Order 2022 (PDPO)Brunei Darussalam
- BS 65000:2014 - Guidance on Organizational ResilienceUnited Kingdom
- BSI IT-GrundschutzGermany
- BSI PAS 1880:2020United Kingdom
- BSIMMInternational
- Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019)Bulgaria
C
- C-TPAT - Customs-Trade Partnership Against TerrorismUnited States
- C2M2United States
- C5 (Germany)Germany
- California Civil Code Section 1950.5 (Residential Security Deposits)United States
- California IoT Security LawUnited States - California
- California Labor Code Section 435 (Recording in Restrooms and Locker Rooms)United States
- California Penal Code Section 631 (Wiretapping)United States
- California Penal Code Sections 632 and 632.7 (Recording Confidential Communications)United States
- California Public Records Act (CPRA)United States, California
- Cambodia Law on Electronic Commerce 2019Cambodia
- Canada ITSG-33 - IT Security Risk ManagementCanada
- Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities CatalogueCanada
- Canada's Anti-Spam Legislation (CASL)Canada
- Canadian PIPEDACanada
- Cayman Islands Data Protection Act 2017 (DPA)Cayman Islands
- CCPA/CPRAUnited States - California
- CCSDS 350.0-G-3 - Space Communications Security (Consultative Committee for Space Data Systems)International
- CDP (formerly Carbon Disclosure Project)International
- Cefic Responsible Care Management FrameworkEurope
- CFTC System Safeguards (17 CFR 37, 38, 39, 49)United States
- Chile Personal Data Protection Law (Law No. 21.719)Chile
- China Cybersecurity Law (CSL)People's Republic of China
- China Data Security Law (DSL)People's Republic of China
- China Personal Information Protection Law (PIPL)People's Republic of China
- CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act)United States
- CIS Controls v8International
- CIS Controls v8.1International
- CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0United States
- CISA Industrial Control Systems (ICS) Security GuidanceUnited States
- CISA Zero Trust Maturity ModelUnited States
- Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1International
- Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1International
- CMMC 2.0United States
- CMMC 2.0 Level 1United States
- CNCF Security Technical Advisory Group (TAG)International
- CNIL Guidance on Employee Monitoring and Workplace Video SurveillanceFrance
- COBIT 2019Global
- Codex General Principles of Food Hygiene (CXC 1-1969, Rev. 2022)International
- Colombia Data Protection Law (Law 1581 of 2012)Colombia
- Colorado Artificial Intelligence Act (proposed SB 24-205)Colorado, United States
- Colorado Privacy ActUnited States - Colorado
- Commercial National Security Algorithm Suite (CNSA) 2.0United States
- Competition and Consumer (Consumer Data Right) Rules 2020Australia
- Competition and Consumer Act 2010 Part IVD (Consumer Data Right)Australia
- Competition and Consumer Amendment (Unfair Trading Practices) Act 2026Australia
- Connecticut Data Privacy Act (CTDPA)United States - Connecticut
- Connecticut General Statutes Section 31-48b (Employer Electronic Surveillance Limits)United States
- Connecticut General Statutes Section 31-48d (Electronic Monitoring of Employees)United States
- Connecticut General Statutes Section 52-570d (Recording Private Telephone Conversations)United States
- Connecticut Rules of Professional Conduct (Connecticut Practice Book)United States
- COPPAUnited States
- COSO Enterprise Risk Management (ERM) Framework (2017)Global
- COSO Internal Control - Integrated Framework (2013)Global
- Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGPCosta Rica
- CPMI-IOSCO Principles for Financial Market InfrastructuresInternational
- Critical Infrastructure Risk Management Program (CIRMP) Rules 2023Australia
- Critical Raw Materials Act (Proposed Regulation COM(2023) 192)European Union
- CSA STAR (Security, Trust, Assurance, and Risk)International
- CSRDEuropean Union
- CWE Top 25 Most Dangerous Software Weaknesses (2024)International
- Cyber Essentials PlusUnited Kingdom
- Cyber Security Act 2024 (Australia)Australia
- Czech Republic Act on the Protection of Personal Data (Act No. 110/2019 Coll.)Czech Republic
D
- DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition)Global
- Danish Data Protection Act (Databeskyttelsesloven)Denmark
- Data (Use and Access) Act 2025United Kingdom
- Defence Industry Security Program (DISP)Australia
- Defence Security Principles Framework (DSPF)Australia
- Delaware Code Title 19 Section 705 (Monitoring of Employee Communications)United States
- Delaware Online Privacy and Protection Act (proposed)United States - Delaware
- Delaware Wiretapping and Electronic Surveillance Act (11 Del. C. Chapter 24 Subchapter I)United States
- Dental Board of Australia Infection Prevention and Control Guidance (2024)Australia
- DFARS 252.204-7012 - Safeguarding Covered Defense InformationUnited States
- Digital Economy Partnership Agreement (DEPA)International - Parties
- Digital Services Act (DSA) - Regulation (EU) 2022/2065European Union
- Directive (EU) 2019/1937 on the protection of persons who report breaches of Union lawEuropean Union
- Directive (EU) 2023/970 on pay transparencyEuropean Union
- DISA Security Technical Implementation Guides (STIGs)United States
- DO-178C / ED-12C - Software Considerations in Airborne SystemsInternational
- DO-254 / ED-80 - Design Assurance Guidance for Airborne Electronic HardwareInternational
- DO-326A / ED-202AInternational
- DoD Zero Trust Reference ArchitectureUnited States
- DORAEuropean Union
- DORA ITS on Major Incident Reporting Templates (Commission Implementing Regulation (EU) 2025/302)European Union
- DORA ITS on Register of Information Templates (Commission Implementing Regulation (EU) 2024/2956)European Union
- DORA RTS on Classification of ICT-related Incidents (Commission Delegated Regulation (EU) 2024/1772)European Union
- DORA RTS on ICT Risk Management Framework (Commission Delegated Regulation (EU) 2024/1774)European Union
- DORA RTS on ICT Subcontracting (Commission Delegated Regulation (EU) 2025/532)European Union
- DORA RTS on ICT Third-Party Contractual Policy (Commission Delegated Regulation (EU) 2024/1773)European Union
- DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301)European Union
- DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190)European Union
E
- EAR - Export Administration RegulationsUnited States
- EarthCheck Company Standard Version 4.2International
- EASA Part-IS - Information Security in AviationEuropean Union
- EBA Guidelines on ICT and Security Risk Management (EBA/GL/2019/04)European Union
- ECB TIBER-EU FrameworkEuropean Union
- ECSS-E-ST-40C: Space Engineering - SoftwareEurope
- Ecuador Ley Orgánica de Protección de Datos Personales (LOPDP)Ecuador
- EDM Council CDMC - Cloud Data Management Capability FrameworkInternational
- EDM Council DCAM - Data Management Capability Assessment ModelInternational
- EDPB Guidelines 1/2026 on processing of personal data for scientific research purposesEuropean Union and EEA
- EDPB Guidelines 3/2019 on Processing of Personal Data through Video DevicesEuropean Union and EEA
- Egypt Personal Data Protection Law (Law No. 151 of 2020)Egypt
- eIDAS 2.0 - EU Digital Identity RegulationEuropean Union
- EIOPA Guidelines on ICT Security and Governance (EIOPA-BoS-20/600)European Union
- EIOPA Guidelines on Outsourcing to Cloud Service Providers (EIOPA-BoS-20-002)European Union
- EMV 3-D Secure (3DS) - Payment Authentication ProtocolGlobal
- EN 301 549 - Accessibility requirements for ICT products and servicesEuropean Union
- EN 301 549 V4.1.1 - Accessibility requirements for ICT products and servicesEuropean Union
- EN 50126 / EN 50128 / EN 50129 - Railway Applications RAMSEuropean Union
- EN 50716:2023 - Railway Applications - Requirements for Software DevelopmentEuropean Union and EFTA
- ENISA Data Protection Engineering - From Theory to PracticeEuropean Union
- EPA EPCRA / SARA Title III (Emergency Planning and Community Right-to-Know)United States
- EPA RCRA Hazardous Waste ManagementUnited States
- EPA Risk Management Program (40 CFR Part 68)United States
- Equator Principles (EP4, 2020)International
- ESRB Privacy CertifiedUnited States
- ESRS (revised 2026)European Union
- Estonia Personal Data Protection Act (Isikuandmete kaitse seadus, 2019)Estonia
- Ethical Trading Initiative (ETI) Base CodeInternational
- Ethiopia Personal Data Protection Proclamation (No. 1321/2024)Ethiopia
- ETSI EN 303 645European Union
- ETSI Industry Specification Group (ISG) on Quantum Key Distribution (QKD)Global
- EU Accounting Directive (Directive 2013/34/EU)European Union
- EU AI ActEuropean Union
- EU Audiovisual Media Services Directive (AVMSD, Directive 2010/13/EU as amended by Directive 2018/1808 and Directive (EU) 2023/2586)European Union
- EU Batteries Regulation (Regulation (EU) 2023/1542)European Union
- EU Better Internet for Kids (BIK+) StrategyEuropean Union
- EU Carbon Border Adjustment Mechanism (CBAM)European Union
- EU Chips Act (Regulation (EU) 2023/1781)European Union
- EU Clinical Trials Regulation (CTR 536/2014)European Union
- EU CSDDD (Directive (EU) 2024/1760)European Union
- EU Cyber Resilience ActEuropean Union
- EU Cyber Solidarity Act (Regulation (EU) 2025/38)European Union
- EU Data ActEuropean Union
- EU Data Governance Act (DGA)European Union
- EU Delegated Regulation (EU) 2022/30 (Radio Equipment Cybersecurity)European Union
- EU Digital Markets ActEuropean Union
- EU Energy Performance of Buildings Directive (EPBD Recast) - Directive (EU) 2024/1275European Union
- EU ePrivacy Directive (2002/58/EC)European Union
- EU ESPR (Regulation (EU) 2024/1781)European Union
- EU European Media Freedom Act (EMFA)European Union
- EU Food Information to Consumers Regulation (EU) No 1169/2011European Union
- EU General Product Safety Regulation (GPSR, Regulation 2023/988)European Union
- EU In Vitro Diagnostic Medical Devices Regulation (IVDR)European Union
- EU Machinery Regulation (Regulation (EU) 2023/1230)European Union
- EU Markets in Crypto-Assets Regulation (MiCA)European Union
- EU Medical Devices Regulation (MDR 2017/745)European Union
- EU Network Code on Cybersecurity for the Electricity SectorEuropean Union
- EU Omnibus I Directive (Directive (EU) 2026/470)European Union
- EU Payment Services Directive (PSD2)European Union
- EU Platform Work Directive (Directive 2024/2831)European Union
- EU Product Liability Directive (Directive (EU) 2024/2853)European Union
- EU Seveso III Directive (Directive 2012/18/EU)European Union
- EU SFDR (Sustainable Finance Disclosure Regulation)European Union
- EU Statutory Audit Directive (Directive 2006/43/EC)European Union
- EU Taxonomy RegulationEuropean Union
- EU Voluntary Sustainability Reporting Standard (VSME, Delegated Regulation (EU) 2026/1560)European Union
- EU Web Accessibility Directive (Directive 2016/2102)European Union
- European Accessibility Act (Directive (EU) 2019/882)European Union
- Extractive Industries Transparency Initiative (EITI) Standard (2023)International
F
- FAA AC 20-152A - Development Assurance for Airborne Electronic HardwareUnited States
- FAA Aircraft Systems Information Security Protection (ASISP)United States
- Fair Labor Association (FLA) Workplace Code of ConductGlobal
- Family Educational Rights and Privacy Act (FERPA)United States
- FATF 40 RecommendationsGlobal
- FATF Recommendation 16 - Payment Transparency (Travel Rule)Global
- FBI CJIS Security PolicyUnited States
- FCC Customer Proprietary Network Information (CPNI) and Data Breach Rules (47 CFR 64.2001-2011)United States
- FDA 21 CFR Part 11United States
- FDA Quality Management System Regulation (QMSR)United States
- Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)United Arab Emirates
- FedRAMP HighUnited States
- FedRAMP ModerateUnited States
- FedRAMP Rev 5United States federal government
- FFIEC Cybersecurity Assessment Tool (CAT)United States
- FFIEC IT Examination HandbookUnited States
- FIDO2 / WebAuthnInternational
- Financial Services and Markets Act 2000 (UK)United Kingdom
- Finland Data Protection Act (Tietosuojalaki, 1050/2018)Finland
- FINRA Rule 2111 Suitability (United States)United States
- FIRST CSIRT Services Framework and StandardsInternational
- FISMAUnited States federal government
- Florida Digital Bill of Rights (FDBR)United States - Florida
- Florida Security of Communications Act (Fla. Stat. Chapter 934)United States
- France Labour Code (Code du travail) - Employee Monitoring and CSE ConsultationFrance
- France Penal Code Article 226-1 (Invasion of Privacy by Capturing Words, Images or Location)France
- Freedom of Information Act 1982 (Australia)Australia
- French Sapin II Law (Law No. 2016-1691)France
- FSSC 22000 - Food Safety System CertificationInternational
- FSSC 24000 Social Management System Certification Scheme Version 1.0International
- FSSC Development Program Version 2.0International
- FTC GLBA Safeguards Rule (16 CFR Part 314)United States
- FTC Health Breach Notification RuleUnited States
- Full Range Leadership Model (Bass & Avolio)International
G
- GAMP 5 - Good Automated Manufacturing PracticeInternational
- GDPREuropean Union
- Georgia Law on Personal Data Protection (2012)Georgia
- German Supply Chain Due Diligence Act (LkSG)Germany
- Germany Accessibility Strengthening Act (BFSG)Germany
- Germany Criminal Code (StGB) Sections 201 and 201a (Confidentiality of the Spoken Word and Intimate Privacy in Images)Germany
- Germany Federal Data Protection Act (BDSG)Germany
- Germany Works Constitution Act (BetrVG)Germany
- Ghana Cybersecurity ActGhana
- Ghana Data Protection Act 2012 (Act 843)Ghana
- GHG ProtocolInternational
- GHG Protocol Corporate Value Chain (Scope 3) StandardInternational
- GLBAUnited States
- GLI-33 - Gaming Laboratories International Event Wagering SystemsInternational
- Global Cross-Border Privacy Rules (Global CBPR) ForumInternational
- GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6International
- Goleman Emotional Intelligence Leadership FrameworkInternational
- Greece Law 4624/2019 - Hellenic Data Protection Authority (HDPA) Implementation ActGreece
- GRI StandardsInternational
- GS1 Global Standards - Supply Chain Traceability and Data SecurityInternational
H
- Heavy Vehicle National Law Loading RequirementsAustralia
- Heifetz Adaptive Leadership FrameworkInternational
- Hersey & Blanchard Situational Leadership ModelInternational
- HIPAA Breach Notification RuleUnited States
- HIPAA Privacy RuleUnited States
- HIPAA Security RuleUnited States
- HITECH ActUnited States
- HKMA Cyber Resilience Assessment Framework (C-RAF)Hong Kong SAR
- HKMA SPMHong Kong SAR
- HKMA TM-G-1Hong Kong
- HL7 FHIR Security FrameworkInternational
- Hong Kong Personal Data (Privacy) Ordinance (PDPO, Cap 486)Hong Kong
- Hungary Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act)Hungary
I
- IACS Recommendation No. 194 - Cybersecurity Controls for Existing ShipsInternational
- IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board SystemsInternational
- IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1)International
- IAIS Insurance Core Principles (ICPs)International
- IATA Operational Safety Audit (IOSA) Standards ManualInternational
- IATF 16949:2016 - Quality Management System for Automotive ProductionGlobal
- ICAO Annex 17 - Aviation Security (AVSEC)International
- ICC Incoterms 2020 - International Commercial TermsInternational
- Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018)Iceland
- ICH E6(R3) - Good Clinical PracticeInternational
- ICH Q10 - Pharmaceutical Quality SystemInternational
- ICMM Mining Principles (2024 Update)International
- ICN Leadership for Change ProgrammeInternational
- IEC 31010:2019International
- IEC 60601-1 - Medical Electrical Equipment SafetyInternational
- IEC 61508:2010 - Functional Safety of E/E/PE Safety-related SystemsInternational
- IEC 62304:2015 Medical Device Software Lifecycle ProcessesInternational
- IEC 62351 - Power Systems Communication SecurityInternational
- IEC 62443International
- IEEE 1686International
- IEEE 7000International
- IFRS 17 - Insurance ContractsInternational
- IFS Wholesale / Cash & Carry Version 2International
- Illinois Biometric Information Privacy Act (BIPA)United States
- Illinois Eavesdropping Act (720 ILCS 5 Article 14)United States
- ILO Code of Practice on the Protection of Workers' Personal Data (1997)International
- ILO Declaration on Fundamental Principles and Rights at Work (Core Conventions)International
- ILO Nursing Personnel Convention C149 (1977)International
- ILO Tripartite Declaration of Principles concerning Multinational Enterprises (MNE Declaration)International
- IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.4)International
- India Account Aggregator Framework (RBI)India
- India CERT-In Cyber Security Directions 2022India
- India DPDP ActIndia
- India IS 17802 Accessibility for ICT products and servicesIndia
- Indiana Consumer Data Protection ActUnited States - Indiana
- Indonesia PDP LawIndonesia
- Iowa Client Trust Account Rules (Iowa Court Rules Chapter 45)United States
- Iowa Consumer Data Protection ActUnited States - Iowa
- Ireland European Union (Accessibility Requirements of Products and Services) Regulations 2023 (S.I. No. 636 of 2023)Ireland
- IRM/AIRMIC/ALARM A Risk Management Standard (2002)International
- IRS Publication 1075United States
- IS 14489:2018 Occupational Safety and Health Audit Code of PracticeIndia
- ISAE 3402 - Assurance Reports on Controls at a Service OrganisationInternational
- ISMAP (Japan)Japan
- ISO 10002:2018International
- ISO 10005:2005International
- ISO 10005:2018International
- ISO 10006:2003International
- ISO 10006:2017International
- ISO 10007:2017International
- ISO 13485:2016International
- ISO 14001:2015International
- ISO 14001:2026International
- ISO 14004:2016International
- ISO 14064 - Greenhouse Gas Accounting and Verification (Parts 1-3)International
- ISO 14068-1:2023International
- ISO 15189:2022 - Medical Laboratories Requirements for Quality and CompetenceInternational
- ISO 15489-1:2016International
- ISO 19011:2018International
- ISO 19011:2026International
- ISO 19650 - Organisation and Digitisation of Information about Buildings and Civil Engineering Works (BIM)International
- ISO 20121:2024International
- ISO 20400:2017 - Sustainable ProcurementInternational
- ISO 21001:2018International
- ISO 21001:2025International
- ISO 21448:2022International
- ISO 22000:2018International
- ISO 22002-1:2025 Prerequisite programmes on food safety, Part 1: Food manufacturingInternational
- ISO 22002-100:2025 Prerequisite programmes on food safety, Part 100: Requirements for the food, feed and packaging supply chainInternational
- ISO 22002-2:2025 Prerequisite programmes on food safety, Part 2: CateringInternational
- ISO 22002-4:2025 Prerequisite programmes on food safety, Part 4: Food packaging manufacturingInternational
- ISO 22002-5:2025 Prerequisite programmes on food safety, Part 5: Transport and storageInternational
- ISO 22002-6:2025 Prerequisite programmes on food safety, Part 6: Feed and animal food productionInternational
- ISO 22002-7:2025 Prerequisite programmes on food safety, Part 7: Retail and wholesaleInternational
- ISO 22003-1:2022 Requirements for bodies providing audit and certification of food safety management systemsInternational
- ISO 22301:2019International
- ISO 22313:2020 - Guidance on Business Continuity Management SystemsInternational
- ISO 22316International
- ISO 22320:2018International
- ISO 22361:2022International
- ISO 22398:2013International
- ISO 26000:2010International
- ISO 26262:2018 - Functional Safety for Road VehiclesInternational
- ISO 27001:2013International
- ISO 27001:2022International
- ISO 27002:2022International
- ISO 27005:2022International
- ISO 27017:2015International
- ISO 27018:2019International
- ISO 27701:2019International
- ISO 27799:2025International
- ISO 28000:2022International
- ISO 28001:2007 Supply Chain Security ManagementInternational
- ISO 28002:2011International
- ISO 30401International
- ISO 30414:2018 - Human Resource Management: Guidelines for Internal and External Human Capital ReportingInternational
- ISO 30414:2025International
- ISO 31000:2018International
- ISO 31022:2020International
- ISO 37000:2021International
- ISO 37001:2016International
- ISO 37001:2025International
- ISO 37002:2021 - Whistleblowing Management SystemsInternational
- ISO 37003:2025International
- ISO 37004:2023International
- ISO 37005:2024International
- ISO 37009:2025International
- ISO 37101:2016International
- ISO 37301:2021International
- ISO 37302:2025International
- ISO 37303:2025International
- ISO 37500:2014International
- ISO 39001:2012 - Road Traffic Safety ManagementInternational
- ISO 41001:2018 - Facility Management SystemsInternational
- ISO 45001:2018International
- ISO 45003:2021International
- ISO 46001:2019International
- ISO 50001:2018 - Energy Management SystemsInternational
- ISO 55001:2014International
- ISO 55001:2024International
- ISO 56002International
- ISO 8000 - Data QualityInternational
- ISO 9001:2015International
- ISO/DIS 45001:2026International
- ISO/IEC 11179 Metadata Registries (MDR)International
- ISO/IEC 17020:2012 Requirements for the operation of various types of bodies performing inspectionInternational
- ISO/IEC 17025:2017 - General Requirements for Testing and CalibrationInternational
- ISO/IEC 17050-1:2004International
- ISO/IEC 17050-2:2004International
- ISO/IEC 19796-1:2005International
- ISO/IEC 20000-1:2018International
- ISO/IEC 23837:2023International
- ISO/IEC 23894:2023International
- ISO/IEC 25012:2008 - Data Quality ModelInternational
- ISO/IEC 27003:2017International
- ISO/IEC 27004:2016International
- ISO/IEC 27006-1:2024International
- ISO/IEC 27007:2020International
- ISO/IEC 27010:2015International
- ISO/IEC 27011:2024International
- ISO/IEC 27014:2020International
- ISO/IEC 27017:2026International
- ISO/IEC 27018:2025International
- ISO/IEC 27019:2024International
- ISO/IEC 27031:2011International
- ISO/IEC 27031:2025International
- ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative frameworkInternational
- ISO/IEC 27035-1:2023International
- ISO/IEC 27036-1:2021International
- ISO/IEC 27037:2012International
- ISO/IEC 27040:2024International
- ISO/IEC 27041:2015International
- ISO/IEC 27042:2015International
- ISO/IEC 27043:2015International
- ISO/IEC 27050-1:2019International
- ISO/IEC 27050-3:2020International
- ISO/IEC 27400:2022International
- ISO/IEC 27557:2022 - Organisational Privacy Risk ManagementInternational
- ISO/IEC 27701:2025International
- ISO/IEC 29100:2024International
- ISO/IEC 29115:2013 - Entity Authentication Assurance FrameworkInternational
- ISO/IEC 29134:2023International
- ISO/IEC 29147:2018International
- ISO/IEC 30111:2019International
- ISO/IEC 38500:2024International
- ISO/IEC 42001:2023International
- ISO/IEC 42005:2025International
- ISO/IEC 42006:2025International
- ISO/IEC TR 24028:2020International
- ISO/IEC/IEEE 29148:2018 - Systems and Software Engineering - Requirements EngineeringInternational
- ISO/SAE 21434International
- ISO/TS 22317:2021International
- ISO/TS 22318:2021International
- Israel Protection of Privacy Law (5741-1981)Israel
- ISSB StandardsInternational
- Italy Accessibility Requirements of Products and Services Decree (Legislative Decree No. 82/2022)Italy
- Italy Personal Data Protection Code (Legislative Decree No. 196/2003, amended 2018)Italy
- Italy Workers' Statute (Law 300/1970)Italy
- ITAR - International Traffic in Arms RegulationsUnited States
- ITIL 4Global
- ITU Radio Regulations and Space Security StandardsInternational
- ITU-T X.805 - Security Architecture for End-to-End CommunicationsInternational
J
- Jamaica Data Protection Act 2020Jamaica
- Japan Act on Specified Commercial Transactions (Act No. 57 of 1976)Japan
- Japan AI GuidelinesJapan
- Japan FSA Cybersecurity Guidelines for Financial InstitutionsJapan
- JFS-B Standard Ver. 3.1 Food Safety Management (Japan)Japan
- Jordan Personal Data Protection Law (Law No. 24 of 2023)Jordan
K
- Kazakhstan Law on Personal Data and Their Protection (No. 94-V)Kazakhstan
- Kentucky Consumer Data Protection ActUnited States - Kentucky
- Kenya Data Protection ActKenya
- Kenya KS 2952:2022 Accessibility - ICT products and servicesKenya
- Kids Online Safety Act (KOSA)United States
- Kolb Experiential Learning CycleInternational
- Kotter 8-Step Change ModelInternational
- Kuwait CITRA Data Privacy Protection Regulation (Decision No. 26 of 2024)Kuwait
- Kuwait National Cybersecurity FrameworkKuwait
L
- Laos Law on Prevention and Combating Cybercrime (2015)Lao PDR
- Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018)Latvia
- Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal DataMorocco
- Law No. 172-13 on the Protection of Personal DataDominican Republic
- Law No. 2013-450 of 19 June 2013 on the Protection of Personal DataCôte d'Ivoire
- Law on Personal Data Protection (Official Gazette No. 42/2020)North Macedonia
- LEADS in a Caring EnvironmentCanada
- Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018)Lebanon
- LEED v4.1 - Green Building Rating System (US Green Building Council)International
- LGPDBrazil
- Liechtenstein DPALiechtenstein
- Lithuania Law on Legal Protection of Personal Data (2018)Lithuania
- Lloyd's Minimum Standards - Cyber SecurityUnited Kingdom
- Lloyd's of London Cyber Insurance Requirements and Underwriting StandardsUnited Kingdom
- Luxembourg Law of 1 August 2018 on Data Protection (GDPR Implementation)Luxembourg
M
- Malaysia PDPA 2010Malaysia
- Malta Data Protection Act (Cap. 586, 2018)Malta
- MARS-EUnited States
- Maryland Online Data Privacy Act of 2024United States - Maryland
- Maryland Wiretap Act (Courts and Judicial Proceedings 10-402)United States
- Maslach Burnout Inventory (MBI) and Areas of Worklife Survey (AWS) ModelInternational
- Massachusetts Wiretap Act (M.G.L. c. 272 s. 99)United States
- Mauritius DPAMauritius
- MDS2 (Medical Device)United States
- Mexico LFPDPPPMexico
- Michigan Eavesdropping Act (MCL 750.539a to 750.539j)United States
- MiFID II / MiFIREuropean Union
- Minnesota Consumer Data Privacy ActUnited States - Minnesota
- Minnesota Rules of the Board of Continuing Legal EducationUnited States
- MITRE ATT&CKInternational
- MITRE D3FENDInternational
- Modern Slavery Act 2018 (Australia)Australia
- Monetary Authority of Singapore Technology Risk Management GuidelinesSingapore
- Montana Consumer Data Privacy ActUnited States - Montana
- Montana Privacy in Communications (Mont. Code Ann. 45-8-213)United States
- Montenegro Law on Personal Data Protection (2026)Montenegro
- MTCS (Singapore)Singapore
- Myanmar Cybersecurity Law (2023)Myanmar
N
- NABERS - National Australian Built Environment Rating SystemAustralia
- NAIC Annual Financial Reporting Model Regulation (Model Audit Rule, MDL-205)United States
- NAIC Insurance Data Security Model Law (MDL-668)United States
- NAIC Unfair Claims Settlement Practices Model Act (MDL-900) and Model Regulation (MDL-902)United States
- NASRHP Self-Regulating Health Profession Certifying Entity Membership Standards (Australia)Australia
- NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and ProductionInternational
- NATO Cyber Defence Policy and NATO Computer Incident Response Capability (NCIRC)International
- NATO STANAG 4774 (Confidentiality Metadata Labels) and STANAG 4778 (Metadata Binding)International
- Nebraska Data Privacy ActUnited States - Nebraska
- NERC CIPNorth America
- Netherlands GDPR Implementation Act (UAVG - Uitvoeringswet AVG, 2018)Netherlands
- Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024)Netherlands
- Netherlands Works Councils Act (WOR)Netherlands
- Nevada Gaming Control Board Cybersecurity RequirementsUnited States - Nevada
- Nevada Interception of Communications and Private Conversations (NRS 200.610 to 200.690)United States
- New Hampshire Data Privacy ActUnited States - New Hampshire
- New Hampshire Wiretapping and Eavesdropping Act (RSA 570-A)United States
- New Jersey Data Privacy ActUnited States - New Jersey
- New York Civil Rights Law Section 52-c (Electronic Monitoring Notice)United States
- New York Labor Law Sections 203-c and 203-d (Employee Privacy: Recording in Restrooms and Personal Identifying Information)United States
- New York Penal Law Article 250 (Offenses Against the Right to Privacy: Eavesdropping and Unlawful Surveillance)United States
- New York Rules of Professional Conduct Rule 1.15 Attorney Trust Accounts (22 NYCRR Part 1200)United States
- New Zealand Information Security Manual (NZISM)New Zealand
- NFPA 110-2025 Standard for Emergency and Standby Power SystemsUnited States
- NFPA 111-2025 Standard on Stored Electrical Energy Emergency and Standby Power SystemsUnited States
- NFPA 1600 - Standard on Continuity, Emergency, and Crisis ManagementUnited States
- NFPA 70 National Electrical Code 2023 Article 700 Emergency SystemsUnited States
- NFPA 70 National Electrical Code 2023 Article 701 Legally Required Standby SystemsUnited States
- NHS England HTM 06-01 Electrical Services Supply and Distribution (2017 Edition)England
- NHS Healthcare Leadership ModelUnited Kingdom
- Nigeria Data Protection Act 2023 (NDPA)Nigeria
- Nigeria Data Protection Regulation (NDPR)Nigeria
- Nigeria Open Banking Regulatory Framework (CBN, 2023)Nigeria
- NIS2 DirectiveEuropean Union
- NIST AI 600-1: Generative AI ProfileUnited States
- NIST AI Risk Management Framework (AI RMF 1.0)United States
- NIST Cybersecurity Framework 1.0United States
- NIST Cybersecurity Framework 1.1United States
- NIST Cybersecurity Framework 2.0United States
- NIST Post-Quantum Cryptography Standards (FIPS 203, 204, 205)United States
- NIST Privacy FrameworkUnited States
- NIST SP 1800-32United States
- NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment)United States
- NIST SP 800-122United States
- NIST SP 800-123United States
- NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile DevicesUnited States
- NIST SP 800-128United States
- NIST SP 800-137United States
- NIST SP 800-144United States
- NIST SP 800-145United States
- NIST SP 800-146United States
- NIST SP 800-150United States
- NIST SP 800-160United States
- NIST SP 800-161United States
- NIST SP 800-161 Rev 1United States
- NIST SP 800-171United States
- NIST SP 800-171 Rev 3United States
- NIST SP 800-171A - Assessing Security Requirements for Controlled Unclassified Information (CUI)United States
- NIST SP 800-172United States
- NIST SP 800-181United States
- NIST SP 800-183United States
- NIST SP 800-187United States
- NIST SP 800-190United States
- NIST SP 800-207United States
- NIST SP 800-218United States
- NIST SP 800-30United States
- NIST SP 800-37United States
- NIST SP 800-39United States
- NIST SP 800-53 Rev 5United States
- NIST SP 800-53 Rev 5 HIGHUnited States
- NIST SP 800-53 Rev 5 LOWUnited States
- NIST SP 800-53 Rev 5 MODERATEUnited States
- NIST SP 800-53A Rev. 5United States
- NIST SP 800-61 Rev. 3United States
- NIST SP 800-63 Digital Identity GuidelinesUnited States
- NIST SP 800-63-4United States
- NIST SP 800-66United States
- NIST SP 800-66 Rev 2United States
- NIST SP 800-82 Rev 3United States
- NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) SecurityUnited States
- NIST SP 800-88United States
- NIST SP 800-88 Rev 1United States
- NIST SP 800-92United States
- NIST Special Publication 800-34 Revision 1, Contingency Planning Guide for Federal Information SystemsUnited States
- Notifiable Data Breaches Scheme (Australia)Australia
- NRC 10 CFR 73.54 - Nuclear Facility CybersecurityUnited States
- NRF Cybersecurity and Data Privacy Framework (National Retail Federation)United States
- NSA Guidance for Transition to Quantum-Resistant CryptographyUnited States
- NSW AI Operational Policy (2026)Australia
- NSW Child Safe Scheme (Children's Guardian Act 2019 Part 3A)Australia
- NSW Conveyancing (Sale of Land) Regulation 2022Australia
- NSW Environmental Planning and Assessment (Development Certification and Fire Safety) Regulation 2021Australia
- NSW Fair Trading Act 1987Australia
- NSW Food Regulation 2025Australia
- NSW Home Building Act 1989Australia
- NSW Residential Tenancies Act 2010Australia
- NSW Surveillance Devices Act 2007Australia
- NSW Workplace Surveillance Act 2005Australia
- NY DFS 23 NYCRR 500United States
O
- O-RAN WG11 Security SpecificationInternational
- OAIC Privacy Management FrameworkAustralia
- OCC Heightened Standards (12 CFR Part 30, Appendix D)United States
- OECD AI PrinciplesInternational
- OECD Due Diligence Guidance for Responsible AI (2026)International
- OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023 Update)International
- OECD Privacy Guidelines (2013)International
- OECD Recommendation on Artificial Intelligence (2024 Update)International
- OECD/G20 Principles of Corporate GovernanceInternational
- Oman National Cybersecurity FrameworkOman
- Oman Personal Data Protection Law (Royal Decree 6/2022)Oman
- Ontario Accessibility for Ontarians with Disabilities Act (AODA) - IASR Web StandardCanada
- Ontario Employment Standards Act 2000 Part XI.1 (Written Policy on Electronic Monitoring)Canada
- Open Banking SecurityUnited Kingdom
- OpenSSF Best Practices Badge CriteriaInternational
- OpenSSF Open Source Project Security Baseline (OSPS Baseline)International
- OpenSSF ScorecardInternational
- Oregon Consumer Privacy ActUnited States - Oregon
- Oregon Obtaining Contents of Communications (ORS 165.540)United States
- OSFI B-13Canada
- OSHA General Industry Standards (29 CFR Part 1910)United States
- OSHA Safety and Health Regulations for Construction (29 CFR Part 1926)United States
- OWASP API Security Top 10 - 2023International
- OWASP ASVSInternational
- OWASP DevSecOps Maturity Model (DSOMM)International
- OWASP MASVSInternational
- OWASP SAMMInternational
- OWASP Top 10 for LLM Applications 2025International
- OWASP Top 10:2025International
- Own Risk and Solvency Assessment (ORSA) - NAIC Model ActUnited States
P
- Pakistan Personal Data Protection Bill 2023Pakistan
- Panama Law on Personal Data Protection (Law No. 81 of 2019)Panama
- Papua New Guinea National Cybersecurity Policy & Cybercrime Act (2016)Papua New Guinea
- Paraguay Law No. 7593/2025 on Personal Data ProtectionParaguay
- Paraguay Law on Protection of Personal Data (Law No. 6534/2020)Paraguay
- PAS 1192-5:2015 - Security-Minded Approach to BIM and Digital Built EnvironmentsUnited Kingdom
- PCAOB AS 2201 - Audit of Internal Control Over Financial Reporting (ICFR)United States
- PCI 3DS Core Security StandardGlobal
- PCI DSS 4.0International
- PCI P2PEGlobal
- PCI PIN SecurityGlobal
- PCI SSFGlobal
- PDPA SingaporeSingapore
- PDPA ThailandThailand
- PEGI - Pan European Game Information Age Rating SystemEurope
- Pennsylvania Wiretapping and Electronic Surveillance Control Act (18 Pa.C.S. Chapter 57)United States
- Personal Data Act (personopplysningsloven)Norway
- Peru DPLPeru
- Philippines Cybercrime Prevention Act (RA 10175)Philippines
- Philippines Data Privacy ActPhilippines
- PIC/S Guide to Good Manufacturing Practice for Medicinal ProductsInternational
- Poland Act on Personal Data Protection (Ustawa o ochronie danych osobowych, 2018)Poland
- POPIASouth Africa
- Portugal Accessibility Requirements of Products and Services Decree-Law (Decree-Law No. 82/2022)Portugal
- Portugal Law No. 58/2019 - Data Protection Implementation ActPortugal
- Principles for Doing Business at Lloyd'sUnited Kingdom
- Privacy Act 1988 (Australia)Australia
- Privacy Act 2020New Zealand
- Privacy and Other Legislation Amendment Act 2024 (Australia)Australia
- Privacy by Design (PbD) - Seven Foundational PrinciplesInternational
- PropTech Security Standards - Smart Building CybersecurityInternational
- Protective Security Policy Framework (PSPF) Release 2026Australia
- PSD2 SCAEuropean Union
- Psychology Board of Australia Code of Conduct for Psychologists (2025)Australia
- PTESInternational
Q
- Qatar DPLQatar
- Queensland Body Corporate and Community Management Act 1997Australia
- Queensland Building and Construction Commission Act 1991Australia
- Queensland Child Safe Organisations Act 2024Australia
- Queensland Invasion of Privacy Act 1971Australia
- Queensland Property Law Act 2023Australia
- Queensland Residential Tenancies and Rooming Accommodation Act 2008Australia
- Queensland Valuers Registration Act 1992Australia
- Queensland Working with Children Check Act 2000Australia
R
- RBI Cybersecurity Framework for BanksIndia
- Real Estate Settlement Procedures Act (RESPA)United States
- Regional Comprehensive Economic Partnership (RCEP) - E-Commerce ChapterAsia-Pacific
- Regulation (EU) 2019/1239 on the Maritime Single Window (MSW)European Union
- Regulation (EU) 2023/1115 on deforestation-free supply chainsEuropean Union
- Regulation (EU) 2026/2108 establishing the Union Customs Code and the European Union Customs AuthorityEuropean Union
- Regulation on the European Health Data Space (EHDS)European Union
- Reserve Bank of Fiji Guideline 4 - Protection of Consumer Data and Privacy (2024)Fiji
- Responsible Minerals Initiative (RMI) - Responsible Minerals Assurance ProcessGlobal
- RFC 2350 - Expectations for Computer Security Incident Response (BCP 21)International
- Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)United States
- RICS Rules of Conduct and Global Professional StandardsGlobal
- Right to Disconnect (Australia)Australia
- Romania Law No. 190/2018 on Data Protection Measures (GDPR Implementation)Romania
- Russia Federal Law on Personal Data (152-FZ)Russia
- Rwanda DPLRwanda
S
- SA8000:2014 - Social Accountability StandardInternational
- SAE ARP4754B / ED-79B - Guidelines for Development of Civil Aircraft and SystemsInternational
- Samoa Telecommunications Act 2005Samoa
- SANS Incident Handler's Handbook and PICERL MethodologyInternational
- SASB StandardsInternational
- Saudi Arabia PDPLSaudi Arabia
- Saudi NCA ECCSaudi Arabia
- Science Based Targets Initiative (SBTi) - Net-Zero StandardInternational
- Science Based Targets initiative (SBTi) Corporate StandardInternational
- SEC Climate Disclosure RuleUnited States
- SEC Cybersecurity Disclosure RuleUnited States
- Section 508 - ICT Accessibility (Revised)United States
- Secure by Design: A Guide for Manufacturers (CISA)International
- Security of Critical Infrastructure Act 2018 (SOCI)Australia
- Senegal Law on Personal Data Protection (Law No. 2008-12)Senegal
- Senge Fifth Discipline - Learning OrganizationInternational
- Serbia Law on Personal Data Protection (2018)Serbia
- SIG (Shared Assessments)International
- Sigstore - Software Artifact Signing and VerificationInternational
- Singapore AI Governance FrameworkSingapore
- Singapore Cybersecurity Act 2018Singapore
- Singapore Government Instruction Manual on ICT&SS Management (IM8)Singapore
- Singapore Payment Services Act 2019Singapore
- Singapore Protection from Online Falsehoods and Manipulation Act (POFMA, 2019)Singapore
- SLSAInternational
- SOC 1 (SSAE 18 / ISAE 3402)United States
- SOC 2International
- SOC for Cybersecurity - Cybersecurity Risk Management ExaminationUnited States
- Solvency IIEuropean Union and EEA
- South Africa Promotion of Access to Information Act (PAIA)South Africa
- South Korea Cloud Security Assurance Program (CSAP)South Korea
- South Korea Credit Information ActSouth Korea
- South Korea ISMS-PSouth Korea
- South Korea Korea Internet Self-Governance Organisation (KISO) Code of EthicsSouth Korea
- South Korea PIPASouth Korea
- SOX 404 / ICFRUnited States
- Space ISAC (Information Sharing and Analysis Center) - Threat FrameworkInternational
- Spain ENSSpain
- Spain Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD)Spain
- Speech Pathology Australia Code of Ethics (2020)Australia
- Speech Pathology Australia Professional Standards (2020)Australia
- SQF Code Edition 9 - Safe Quality FoodInternational
- Sri Lanka Personal Data Protection Act (No. 9 of 2022)Sri Lanka
- SSAE 18 - Attestation Standards (SOC Reporting)United States
- SSDF (NIST)United States
- Strata Schemes Management Act 2015 (New South Wales)Australia
- Streamlined Sales and Use Tax Agreement (SSUTA)United States
- Student Privacy Pledge 2020United States
- Sweden Data Protection Act (Dataskyddslag, 2018:218)Sweden
- Sweden MCFFS 2026:12 Security Audit and Security Scanning RegulationsSweden
- SWIFT CSCFInternational
- Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)Switzerland
T
- Taiwan PDPATaiwan
- Tanzania Personal Data Protection Act 2022Tanzania
- Tasmania Child and Youth Safe Organisations Act 2023Australia
- Taxation Administration Act 1953 (Cth)Australia
- TCFD RecommendationsInternational
- TEFCA - Trusted Exchange Framework and Common AgreementUnited States
- Telecommunications (Consumer Protection and Service Standards) Act 1999 (Australia)Australia
- Telecommunications Sector Security Reforms (TSSR)Australia
- Tennessee Information Protection Act (TIPA)United States
- Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001)United States
- Texas Data Privacy and Security Act (TDPSA)United States
- Texas Penal Code Section 16.02 (Unlawful Interception, Use or Disclosure of Wire, Oral or Electronic Communications)United States
- Texas State Fire Marshal Rules (28 TAC Chapter 34, Subchapters C, E, F and G)United States
- The CAP Code (UK Code of Non-broadcast Advertising and Direct & Promotional Marketing), Edition 12United Kingdom
- The Leadership Challenge (Kouzes & Posner)International
- TISAX - Trusted Information Security Assessment ExchangeInternational
- TNFD RecommendationsInternational
- Tonga Communications Act 2015Tonga
- Tonga Privacy Act 2025Tonga
- TQCSI HACCP Code:2024International
- Trinidad and Tobago Data Protection Act 2011Trinidad and Tobago
- Truth in Lending Act (TILA)United States
- TSA Pipeline Cybersecurity DirectivesUnited States
- TSA Pipeline SecurityUnited States
- Tunisia Organic Law on Personal Data Protection (Law No. 2004-63)Tunisia
- Turkey Cybersecurity Law (Law No. 7545)Turkey
- Turkey KVKKTurkey
- Turkey Zoning Law No. 3194 (Imar Kanunu)Turkiye
U
- UAE Virtual Asset Regulatory Authority (VARA) RegulationsUnited Arab Emirates
- Uganda Data Protection and Privacy Act (2019)Uganda
- UK Age Appropriate Design Code (Children's Code)United Kingdom
- UK AI Regulation FrameworkUnited Kingdom
- UK Bribery Act 2010United Kingdom
- UK Building Safety Act 2022United Kingdom
- UK Companies Act 2006United Kingdom
- UK Concordat on Open Research Data (UKRI)United Kingdom
- UK Construction (Design and Management) Regulations 2015 (CDM 2015)Great Britain
- UK Cyber EssentialsUnited Kingdom
- UK Data Protection Act 2018United Kingdom
- UK Defence Standard 05-138 - Cyber Security for Defence SuppliersUnited Kingdom
- UK Equality Act 2010United Kingdom
- UK FCA Consumer Duty (Principle 12 and PRIN 2A)United Kingdom
- UK FCA/PRA Operational Resilience FrameworkUnited Kingdom
- UK Gambling Commission LCCP and Remote Technical StandardsGreat Britain
- UK GDPR (UK General Data Protection Regulation)United Kingdom
- UK Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 (CQC Fundamental Standards)England
- UK ICO Employment Practices and Data Protection: Monitoring Workers (2023)United Kingdom
- UK ICO Guidance on Video Surveillance including CCTV (2022)United Kingdom
- UK Investigatory Powers (Interception by Businesses etc. for Monitoring and Record-keeping Purposes) Regulations 2018United Kingdom
- UK Land Registration Act 2002United Kingdom
- UK Modern Slavery Act 2015United Kingdom
- UK NCSC Cyber Assessment FrameworkUnited Kingdom
- UK Online Safety Act 2023United Kingdom
- UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear FacilitiesUnited Kingdom
- UK Open Banking StandardUnited Kingdom
- UK Privacy and Electronic Communications Regulations 2003 (PECR)United Kingdom
- UK Product Security and Telecommunications Infrastructure Act (PSTI)United Kingdom
- UK Security and Emergency Measures Direction (SEMD) - Water IndustryEngland and Wales
- UK Telecommunications (Security) Act 2021United Kingdom
- Ukraine Law on Personal Data Protection (Law No. 2297-VI)Ukraine
- UN Guiding Principles on Business and Human Rights (UNGPs)International
- UNCITRAL Model Law on Electronic Commerce (1996, updated 2005)International
- UNECE WP.29 R155International
- UNECE WP.29 R156International
- UNESCO Recommendation on the Ethics of AIInternational
- UNICEF Policy Guidance on AI for Children (2021)International
- Union Customs Code (UCC) - Regulation (EU) No 952/2013European Union
- United States CAN-SPAM Act of 2003 and FTC CAN-SPAM Rule (16 CFR Part 316)United States
- United States State Sales Tax Economic Nexus for Remote SellersUnited States
- Uruguay DPLUruguay
- US ADA Title II - Web and Mobile App Accessibility Rule (28 CFR Part 35 Subpart H)United States
- US Americans with Disabilities Act (ADA) - Title III Digital AccessibilityUnited States
- US Automated Commercial Environment (ACE) - CBP Trade Data RequirementsUnited States
- US Clinical Laboratory Improvement Amendments (CLIA) Regulations (42 CFR Part 493)United States
- US Consumer Product Safety Act (CPSC) Manufacturer and Importer DutiesUnited States
- US DOT Hazardous Materials Regulations (49 CFR Parts 171 to 180)United States
- US Electronic Communications Privacy Act Title I (Wiretap Act, 18 USC 2510-2523)United States
- US EPA Safe Drinking Water Act (SDWA) - Cybersecurity RequirementsUnited States
- US Executive Order 14028 - Improving the Nation's CybersecurityUnited States
- US Executive Order 14144 - Strengthening and Promoting Innovation in the Nation's CybersecurityUnited States
- US Fair Debt Collection Practices Act (FDCPA) and Regulation F (12 CFR Part 1006)United States
- US FDA Food Code 2026United States
- US FDA Food Labeling Regulations (21 CFR Part 101)United States
- US Federal Motor Carrier Safety Regulations (49 CFR Parts 350 to 399)United States
- US Foreign Corrupt Practices Act (FCPA)United States
- US Form I-9 Employment Eligibility Verification (8 USC 1324a and 8 CFR Part 274a)United States
- US Gramm-Leach-Bliley Act (GLBA) - Higher Education Safeguards RuleUnited States
- US Internal Revenue Code Section 3402 Income Tax Withholding at Source (26 USC 3402)United States
- US Investment Advisers Act of 1940 and SEC Adviser Rules (17 CFR Part 275)United States
- US ITAR and EAR - Export Control and Data SecurityUnited States
- US Magnuson-Moss Warranty Act (15 USC 2301-2312)United States
- US Maritime Transportation Security Act (MTSA) and USCG Cybersecurity RequirementsUnited States
- US Medicare Provider and Supplier Enrollment (42 CFR Part 424 Subpart P)United States
- US No Surprises Act (42 USC 300gg-111 to 300gg-139) and 45 CFR Part 149United States
- US NRC 10 CFR 73.54 - Cyber Security for Nuclear Power PlantsUnited States
- US OFAC Sanctions Compliance FrameworkUnited States
- US SBA SOP 50 10 8.1 Lender and Development Company Loan ProgramsUnited States
- US SEC Digital Assets and Crypto Regulatory FrameworkUnited States
- US SEC Regulation Best Interest (17 CFR 240.15l-1)United States
- US Section 504 of the Rehabilitation Act (29 USC 794) and HHS Rule 45 CFR Part 84United States
- US Stored Communications Act (18 USC 2701-2713)United States
- US Uniform Commercial Code Article 9 Secured TransactionsUnited States
- USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement)United States
- Utah Consumer Privacy ActUnited States
- Uzbekistan Law on Personal Data (No. ZRU-547)Uzbekistan
V
- Vermont Data Privacy and Online Surveillance ActUnited States - Vermont
- Victoria Child Safe Standards (2022)Australia
- Victoria Occupational Health and Safety Act 2004Australia
- Victoria Occupational Health and Safety Regulations 2017Australia
- Victoria Owners Corporations Act 2006Australia
- Victoria Surveillance Devices Act 1999Australia
- Vietnam Law on Cybersecurity (No. 116/2025/QH15)Vietnam
- Vietnam PDPDVietnam
- Virginia CDPAUnited States - Virginia
- Voluntary Principles on Security and Human Rights (VPs)International
- VUCA Leadership FrameworkInternational
W
- W3C Verifiable Credentials (VC) Data Model 2.0International
- Washington My Health My Data Act (MHMD)United States - Washington
- Washington RCW Chapter 9.73 (Recording Private Communications and Conversations)United States
- WCAG 2.2International
- WCO Authorised Economic Operator (AEO) FrameworkInternational
- WCO SAFE Framework of Standards to Secure and Facilitate Global Trade (2025)International
- WELL Building Standard v2 (International WELL Building Institute)International
- WHO Global Competency ModelInternational
- WHO Global Strategy on Digital Health 2020-2025International
- Wisconsin Data Privacy Act (SB 670)United States - Wisconsin
- World Bank Group General EHS GuidelinesInternational