RESOURCES

Authority Documents

Virginia General Assembly
Code of Virginia Title 59.1, Chapter 53, Consumer Data Protection Act

Authority Document added to the UCF

International Organization for Standardization
ISO/IEC 27003:2017, Information technology -- Security techniques -- Information security management systems -- Guidance

Authority Document added to the UCF

International Organization for Standardization
ISO/IEC 27007:2020, Information security, cybersecurity and privacy protection -- Guidelines for information security management systems auditing

Authority Document added to the UCF

The Center for Internet Security
CIS Controls

Authority Document added to the UCF

International Society of Automation
Security for Industrial Automation and Control Systems, Part 4-2: Technical Security Requirements for IACS components

Authority Document added to the UCF

American Institute of Certified Public Accountants
Reporting on Controls at a Service Organization: Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy (SOC2)

Authority Document added to the UCF

American Institute of Certified Public Accountants
Reporting on Controls at a Service Organization: Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy (SOC2)

Authority Document added to the UCF

Monetary Authority of Singapore
Technology Risk Management Guidelines

Authority Document added to the UCF

The Cloud Security Alliance
Cloud Controls Matrix

Authority Document added to the UCF

PCI Security Standards Council
Payment Card Industry (PCI) Data Security Standard, Requirements and Security Assessment Procedures

Authority Document added to the UCF

PCI Security Standards Council
Payment Card Industry (PCI) Data Security Standard, Requirements and Security Assessment Procedures

Authority Document added to the UCF

US National Institute of Standards and Technology
Reference Spreadsheet for the Workforce Framework for Cybersecurity (NICE Framework)"

Authority Document added to the UCF

US Department of Defense
252.204-7012, SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT REPORTING (DEC 2019)

Authority Document added to the UCF

US National Institute of Standards and Technology
Enhanced Security Requirements for Protecting Controlled Unclassified Information, NIST SP 800-172

Authority Document added to the UCF

US Congress
GLB Gramm-Leach-Bliley Act (GLB)

Authority Document added to the UCF

US Department of Defense
Cybersecurity Maturity Model Certification

Authority Document added to the UCF

US Department of Defense
Cybersecurity Maturity Model Certification

Authority Document added to the UCF

US Department of Defense
Cybersecurity Maturity Model Certification, Version 1.0, Level 5

Authority Document added to the UCF