FISMA: Federal Information Security Management Act - Provides a comprehensive framework for ensuring the effectiveness of information security controls over federal information resources
Privacy Act of 1974: Establishes a code of fair information practices governing the collection, maintenance, use, and dissemination of personal information maintained by federal agencies
CFAA: Computer Fraud and Abuse Act - Addresses computer-related crimes and provides both criminal and civil penalties for unauthorized access to computer systems
GLBA: Gramm-Leach-Bliley Act - Requires financial institutions to explain their information-sharing practices and protect sensitive data
HIPAA: Health Insurance Portability and Accountability Act - Sets national standards for the protection of individuals' medical records and other personal health information
PCI DSS: Payment Card Industry Data Security Standard - Security standards for organizations that handle credit card data to ensure protection of cardholder information
SOX: Sarbanes-Oxley Act - Requires proper financial disclosure from corporations and establishes standards for IT security and control
NIST SP 800-53: National Institute of Standards and Technology Special Publication providing security and privacy controls for federal information systems
NIST CSF: NIST Cybersecurity Framework - Voluntary guidance for private sector organizations to better manage and reduce cybersecurity risk
State Breach Laws: Various state-specific laws requiring notification of security breaches involving personal information
FAR: Federal Acquisition Regulation - Principal set of rules governing the federal government's purchasing process
NDA Requirements: Non-Disclosure Agreement provisions necessary for protecting confidential information during security assessment processes
SLA Requirements: Service Level Agreement specifications defining the level of service expected from the security assessment provider
ISO 27001/27002: International standards providing best practice recommendations for information security management
COBIT: Control Objectives for Information and Related Technologies - Framework for IT governance and management
CIS Controls: Center for Internet Security Controls - Set of actions for cyber defense providing specific ways to stop today's most pervasive attacks
