Compliance
Compliance
Compliance frameworks and regulations establish requirements for how organizations must protect sensitive data and manage access to information systems. This category covers standards such as GDPR, HIPAA, PCI DSS, SOC 2, and NIST frameworks, along with how they apply to Active Directory and identity management practices. Proper documentation, access controls, audit logging, and regular security assessments are typically required to demonstrate compliance and pass audits.
Criminal Justice Information Services (CJIS) Security Policy
An FBI policy detailing security requirements for agencies and vendors that handle criminal justice...
Cybersecurity Maturity Model Certification (CMMC)
A tiered certification program from the U.S. Department of Defense that assesses the cybersecurity...
Federal Risk and Authorization Management Program (FedRAMP)
A standardized approach to security assessment and authorization for cloud products used by U.S....
General Data Protection Regulation (GDPR)
An EU regulation that governs the processing of personal data of EU residents, mandating...