U.S. Federal Security Frameworks

NIST SP 800-53

Security and Privacy Controls for Information Systems and Organizations

FedRAMP Rev 5

Federal Risk and Authorization Management Program Security Baselines

FedRAMP 20x KSI

Key Security Indicators for FedRAMP 20x authorization

DoD SRG

DoD Cloud Computing Security Requirements Guide - FedRAMP+ controls by Impact Level

Kubernetes STIG

DoD Security Technical Implementation Guide for Kubernetes container orchestration

NIST AI RMF

AI Risk Management Framework Playbook - Suggested actions for trustworthy AI

ITSG-33

IT Security Risk Management - Canadian Government Security Control Catalogue

NIST SSDF

Secure Software Development Framework - Practices for integrating security into SDLC

NIST SP 800-171

Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations

CMMC

Cybersecurity Maturity Model Certification for DoD contractors

GovRAMP

Government Risk and Authorization Management Program - Security Baselines for State and Local Government Cloud Services

NIST SP 800-161

Supply Chain Risk Management

NIST SP 800-171 Rev 3

CUI Protection Requirements Rev 3

NIST SP 800-171A Rev 3

Assessing CUI Security Rev 3

NIST SP 800-171A

Assessing CUI Security Requirements

NIST SP 800-172

Enhanced Security for CUI

NIST SP 800-207 Zero Trust

Zero Trust Architecture

NIST SP 800-218 SSDF

Secure Software Development Framework

NIST AI 600-1

Artificial Intelligence Risk Management

45 CFR 155.260

CMS Privacy and Security Standards

FBI CJIS

Criminal Justice Information Services Security Policy

US Data Privacy Framework

US-EU Data Privacy Framework

DHS TIC 3.0

Trusted Internet Connections

CISA CPG

Cross-Sector Cybersecurity Performance Goals

CISA SSDAF

Secure Software Development Attestation Form

CISA Secure by Design

Principles and pledge goals for building cybersecurity into product design — jointly published by CISA, FBI, NSA, and 17+ international partners

CMMC 2.0 Level 1

Cybersecurity Maturity Model Certification Level 1

CMMC 2.0 Level 1 AOS

CMMC Level 1 Assessment Objectives

DoD Zero Trust Roadmap

DoD Zero Trust Strategy Roadmap

DoD ZTA Reference Architecture

DoD Zero Trust Reference Architecture

Executive Order 14028

Improving the Nations Cybersecurity

FCA CRM

Farm Credit Administration Cyber Risk Management

FIPPs

Fair Information Practice Principles

GLBA (16 CFR 314)

Gramm-Leach-Bliley Act Safeguards Rule

HIPAA Simplification 2013

HIPAA Administrative Simplification

NERC CIP

Critical Infrastructure Protection Standards

SEC Cybersecurity Rule

SEC Cybersecurity Risk Management Rule