{"frameworks":[{"s":"iso-410012018-facility-management-systems","n":"ISO 41001:2018","j":"International (ISO)","v":0,"c":167,"m":135},{"s":"iso-390012012-road-traffic-safety-management","n":"ISO 39001:2012","j":"International","v":0,"c":168,"m":132},{"s":"nist-sp-800-53-rev-5","n":"NIST SP 800-53 Rev 5","j":"United States","v":1,"c":192,"m":132},{"s":"iso-56002","n":"ISO 56002","j":"International","v":0,"c":163,"m":123},{"s":"iso-370022021-whistleblowing-management-systems","n":"ISO 37002:2021","j":"International (ISO)","v":0,"c":158,"m":121},{"s":"iso-223132020-guidance-on-business-continuity-management-systems","n":"ISO 22313:2020","j":"International (ISO)","v":0,"c":166,"m":120},{"s":"iso-27701-2019","n":"ISO 27701:2019","j":"International","v":1,"c":130,"m":115},{"s":"nist-cybersecurity-framework-20","n":"NIST Cybersecurity Framework 2.0","j":"United States","v":1,"c":106,"m":78},{"s":"isoiec-170252017-general-requirements-for-testing-and-calibration-laboratories","n":"ISO/IEC 17025:2017","j":"International (ISO/IEC)","v":0,"c":87,"m":67},{"s":"iso-27018-2019","n":"ISO 27018:2019","j":"International","v":1,"c":80,"m":66},{"s":"iso-iec-23894-2023","n":"ISO/IEC 23894:2023","j":"International","v":1,"c":80,"m":65},{"s":"cloud-security-alliance-cloud-controls-matrix-ccm-v401","n":"Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1","j":"International","v":0,"c":197,"m":64},{"s":"iso-27002-2022","n":"ISO 27002:2022","j":"International","v":1,"c":86,"m":64},{"s":"isoiec-270032017","n":"ISO/IEC 27003:2017","j":"International","v":0,"c":72,"m":64},{"s":"australian-information-security-manual","n":"Australian Information Security Manual","j":"Australia","v":1,"c":1081,"m":62},{"s":"iso-iec-42001-2023","n":"ISO/IEC 42001:2023","j":"International","v":1,"c":78,"m":61},{"s":"iso-iec-38500-2024","n":"ISO/IEC 38500:2024","j":"International","v":1,"c":60,"m":60},{"s":"iso-13485-2016","n":"ISO 13485:2016","j":"International","v":1,"c":72,"m":59},{"s":"iso-9001-2015","n":"ISO 9001:2015","j":"International","v":1,"c":58,"m":58},{"s":"iso-151892022-medical-laboratories-requirements-for-quality-and-competence","n":"ISO 15189:2022","j":"International (ISO)","v":0,"c":74,"m":56},{"s":"as9100d-aerospace-quality-management-system","n":"AS9100D","j":"International (Aerospace)","v":0,"c":61,"m":53},{"s":"iso-22000-2018","n":"ISO 22000:2018","j":"International","v":1,"c":55,"m":52},{"s":"c5-germany","n":"C5 (Germany)","j":"Germany","v":1,"c":121,"m":49},{"s":"nist-sp-800-171","n":"NIST SP 800-171","j":"United States","v":1,"c":93,"m":49},{"s":"iso-19011-2018","n":"ISO 19011:2018","j":"International","v":1,"c":48,"m":48},{"s":"iso-31000-2018","n":"ISO 31000:2018","j":"International","v":1,"c":52,"m":48},{"s":"nist-sp-800-207","n":"NIST SP 800-207","j":"United States","v":1,"c":51,"m":46},{"s":"cmmc-20","n":"CMMC 2.0","j":"United States","v":1,"c":110,"m":45},{"s":"belgium-cyberfundamentals","n":"Belgium CyberFundamentals","j":"Belgium","v":1,"c":44,"m":44},{"s":"3gpp-5g-security-architecture-ts-33501","n":"3GPP 5G Security Architecture (TS 33.501)","j":"International (3GPP)","v":1,"c":43,"m":43},{"s":"iso-27001-2022","n":"ISO 27001:2022","j":"International","v":1,"c":52,"m":42},{"s":"iso-37301-2021","n":"ISO 37301:2021","j":"International","v":1,"c":42,"m":42},{"s":"iso-50001-2018-energy-management-systems","n":"ISO 50001:2018","j":"International (ISO)","v":1,"c":46,"m":42},{"s":"nist-sp-800-218","n":"NIST SP 800-218","j":"United States","v":1,"c":42,"m":42},{"s":"nist-ai-risk-management-framework-ai-rmf-10","n":"NIST AI Risk Management Framework (AI RMF 1.0)","j":"United States (NIST)","v":1,"c":52,"m":41},{"s":"iso-45001-2018","n":"ISO 45001:2018","j":"International","v":1,"c":44,"m":40},{"s":"iso-37001-2016","n":"ISO 37001:2016","j":"International","v":1,"c":39,"m":39},{"s":"iso-22301-2019","n":"ISO 22301:2019","j":"International","v":1,"c":39,"m":38},{"s":"soc-2","n":"SOC 2","j":"United States","v":0,"c":54,"m":38},{"s":"china-personal-information-protection-law-pipl","n":"China Personal Information Protection Law (PIPL)","j":"People's Republic of China","v":0,"c":52,"m":37},{"s":"bsimm","n":"BSIMM","j":"International","v":1,"c":36,"m":36},{"s":"iso-14001-2015","n":"ISO 14001:2015","j":"International","v":1,"c":36,"m":36},{"s":"iso-14004-2016","n":"ISO 14004:2016","j":"International","v":1,"c":40,"m":36},{"s":"nist-sp-800-172","n":"NIST SP 800-172","j":"United States","v":1,"c":36,"m":36},{"s":"as9100d2016-quality-management-systems-for-aviation-space-and-defence","n":"AS9100D:2016","j":"International (IAQG/SAE)","v":0,"c":42,"m":35},{"s":"asean-guide-on-ai-governance-and-ethics","n":"ASEAN Guide on AI Governance and Ethics","j":"ASEAN","v":1,"c":37,"m":35},{"s":"apra-cps-234","n":"APRA CPS 234","j":"Australia","v":1,"c":35,"m":34},{"s":"iso-27017-2015","n":"ISO 27017:2015","j":"International","v":1,"c":40,"m":34},{"s":"iso-37301","n":"ISO 37301","j":"International","v":0,"c":43,"m":34},{"s":"nist-sp-800-160","n":"NIST SP 800-160","j":"United States","v":1,"c":49,"m":34},{"s":"iso-27018","n":"ISO 27018","j":"International","v":0,"c":77,"m":33},{"s":"iso-9001","n":"ISO 9001","j":"International","v":0,"c":48,"m":33},{"s":"azure-security-benchmark","n":"Azure Security Benchmark","j":"International","v":1,"c":54,"m":31},{"s":"iso-27017","n":"ISO 27017","j":"International","v":0,"c":37,"m":30},{"s":"iso-55001","n":"ISO 55001","j":"International","v":0,"c":40,"m":30},{"s":"isoiec-270112024","n":"ISO/IEC 27011:2024","j":"International","v":0,"c":39,"m":30},{"s":"nist-sp-800-53a-rev-5","n":"NIST SP 800-53A Rev. 5","j":"United States","v":1,"c":48,"m":30},{"s":"asd-strategies-to-mitigate-cyber-security-incidents","n":"ASD Strategies to Mitigate Cyber Security Incidents","j":"Australia","v":1,"c":37,"m":29},{"s":"asic-cyber-resilience-good-practices","n":"ASIC Cyber Resilience Good Practices","j":"Australia","v":1,"c":29,"m":29},{"s":"apra-cps-230-operational-risk-management","n":"APRA CPS 230 Operational Risk Management","j":"Australia","v":1,"c":47,"m":28},{"s":"amlctf-act-2006-australia","n":"AML/CTF Act 2006 (Australia)","j":"Australia","v":1,"c":39,"m":27},{"s":"asis-spc1-2009-organizational-resilience-standard","n":"ASIS SPC.1-2009","j":"United States (ASIS/ANSI)","v":0,"c":42,"m":27},{"s":"iso-22000","n":"ISO 22000","j":"International","v":0,"c":39,"m":27},{"s":"iso-iec-17025-2017-general-requirements-for-testing-and-calibration","n":"ISO/IEC 17025:2017","j":"International","v":1,"c":38,"m":27},{"s":"administrative-measures-for-the-security-assessment-of-generative-ai-services-2023-and-algorithmic-recommendation-management-provisions-2022","n":"Administrative Measures for the Security Assessment of Generative AI Services (2023) and Algorithmic Recommendation Management Provisions (2022)","j":"China","v":1,"c":48,"m":26},{"s":"asean-data-management-framework","n":"ASEAN Data Management Framework","j":"ASEAN","v":1,"c":27,"m":26},{"s":"australia-consumer-data-right-banking-cdr","n":"Australia Consumer Data Right","j":"Australia","v":1,"c":28,"m":26},{"s":"bimco-cyber-security","n":"BIMCO Cyber Security","j":"International","v":1,"c":26,"m":26},{"s":"gdpr","n":"GDPR","j":"European Union","v":1,"c":27,"m":26},{"s":"iso-19011","n":"ISO 19011","j":"International","v":0,"c":34,"m":26},{"s":"iso-30401","n":"ISO 30401","j":"International","v":0,"c":42,"m":26},{"s":"iso-31000","n":"ISO 31000","j":"International","v":0,"c":43,"m":26},{"s":"iso-37001","n":"ISO 37001","j":"International","v":0,"c":42,"m":26},{"s":"iso-45001","n":"ISO 45001","j":"International","v":0,"c":39,"m":26},{"s":"canada-itsg-33-it-security-risk-management","n":"Canada ITSG-33","j":"Canada (Canadian Centre for Cyber Security)","v":1,"c":26,"m":25},{"s":"nist-sp-800-171a-rev-3-assessing-cui-security-requirements","n":"NIST SP 800-171A Rev 3","j":"United States (NIST)","v":1,"c":35,"m":25},{"s":"acsc-essential-eight","n":"ACSC Essential Eight","j":"Australia","v":1,"c":24,"m":24},{"s":"bank-secrecy-act-anti-money-laundering-bsaaml","n":"Bank Secrecy Act / Anti-Money Laundering (BSA/AML)","j":"United States","v":1,"c":44,"m":24},{"s":"bsi-it-grundschutz","n":"BSI IT-Grundschutz","j":"Germany","v":0,"c":55,"m":24},{"s":"cisa-zero-trust-maturity-model","n":"CISA Zero Trust Maturity Model","j":"United States","v":1,"c":46,"m":24},{"s":"cncf-security-technical-advisory-group-tag","n":"CNCF Security Technical Advisory Group (TAG)","j":"International (CNCF/Linux Foundation)","v":1,"c":24,"m":24},{"s":"iso-27043","n":"ISO 27043","j":"International","v":0,"c":52,"m":24},{"s":"isosae-21434","n":"ISO/SAE 21434","j":"International","v":0,"c":50,"m":24},{"s":"nist-sp-800-128","n":"NIST SP 800-128","j":"United States","v":1,"c":39,"m":24},{"s":"australian-energy-sector-cyber-security-framework-aescsf","n":"Australian Energy Sector Cyber Security Framework (AESCSF)","j":"Australia","v":1,"c":32,"m":23},{"s":"bermuda-monetary-authority-bma-cyber-risk-management-code-of-conduct","n":"Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct","j":"Bermuda (BMA)","v":1,"c":27,"m":23},{"s":"ffiec-it-examination-handbook","n":"FFIEC IT Examination Handbook","j":"United States","v":0,"c":78,"m":23},{"s":"iso-27019","n":"ISO 27019","j":"International","v":0,"c":46,"m":23},{"s":"nist-sp-800-171a-assessing-security-requirements-for-controlled-unclassified-information-cui","n":"NIST SP 800-171A","j":"United States","v":1,"c":32,"m":23},{"s":"aicpa-privacy-management-framework-pmf","n":"AICPA Privacy Management Framework (PMF)","j":"United States (AICPA)","v":1,"c":26,"m":22},{"s":"api-1164","n":"API 1164","j":"United States","v":0,"c":24,"m":22},{"s":"c2m2","n":"C2M2","j":"United States","v":1,"c":22,"m":22},{"s":"iso-10005-2005","n":"ISO 10005:2005","j":"International","v":1,"c":25,"m":22},{"s":"iso-370002021","n":"ISO 37000:2021","j":"International","v":0,"c":58,"m":22},{"s":"21-cfr-part-58-good-laboratory-practice-glp","n":"21 CFR Part 58","j":"United States","v":1,"c":29,"m":21},{"s":"apra-sps-220-risk-management-superannuation","n":"APRA SPS 220 Risk Management (Superannuation)","j":"Australia","v":1,"c":28,"m":21},{"s":"canadian-pipeda","n":"Canadian PIPEDA","j":"Canada","v":1,"c":31,"m":21},{"s":"colombia-data-protection-law-law-1581-of-2012","n":"Colombia Data Protection Law (Law 1581 of 2012)","j":"Colombia","v":1,"c":27,"m":21},{"s":"dod-zero-trust-reference-architecture","n":"DoD Zero Trust Reference Architecture","j":"United States","v":1,"c":45,"m":21},{"s":"iso-55001-2014","n":"ISO 55001:2014","j":"International","v":1,"c":21,"m":21},{"s":"iso-27701","n":"ISO/IEC 27701:2019","j":"International","v":0,"c":38,"m":21},{"s":"iso-iec-tr-24028-2020","n":"ISO/IEC TR 24028:2020","j":"International","v":1,"c":47,"m":21},{"s":"nist-sp-800-53-revision-51-high","n":"NIST SP 800-53 Revision 5.1 HIGH","j":"United States","v":0,"c":317,"m":21},{"s":"21-cfr-part-211-current-good-manufacturing-practice","n":"21 CFR Part 211","j":"United States","v":1,"c":78,"m":20},{"s":"awwa-cybersecurity-guidance-for-the-water-sector-american-water-works-association","n":"AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)","j":"United States (AWWA)","v":0,"c":37,"m":20},{"s":"canada-artificial-intelligence-and-data-act-aida","n":"Canada Artificial Intelligence and Data Act (AIDA)","j":"Canada","v":0,"c":20,"m":20},{"s":"fedramp-high","n":"FedRAMP High","j":"United States","v":1,"c":417,"m":20},{"s":"iec-62443","n":"IEC 62443","j":"International","v":0,"c":81,"m":20},{"s":"iso-27005-2022","n":"ISO 27005:2022","j":"International","v":1,"c":39,"m":20},{"s":"iso-280012007-supply-chain-security-management","n":"ISO 28001:2007 Supply Chain Security Management","j":"International","v":0,"c":36,"m":20},{"s":"ssae-18-attestation-standards-soc-reporting","n":"SSAE 18","j":"International","v":0,"c":67,"m":20},{"s":"australian-privacy-principles-apps","n":"Australian Privacy Principles (APPs)","j":"Australia","v":1,"c":20,"m":19},{"s":"aws-well-architected-security-pillar","n":"AWS Well-Architected Security Pillar","j":"International","v":1,"c":89,"m":19},{"s":"cisa-cross-sector-cybersecurity-performance-goals-cpg-20","n":"CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0","j":"United States","v":1,"c":35,"m":19},{"s":"dora","n":"DORA","j":"European Union","v":1,"c":26,"m":19},{"s":"nist-sp-800-190","n":"NIST SP 800-190","j":"United States","v":1,"c":45,"m":19},{"s":"pci-ssf","n":"PCI SSF","j":"International","v":0,"c":49,"m":19},{"s":"appi","n":"APPI","j":"Japan","v":1,"c":21,"m":18},{"s":"cwe-top-25-most-dangerous-software-weaknesses-2024","n":"CWE Top 25 Most Dangerous Software Weaknesses (2024)","j":"International","v":1,"c":25,"m":18},{"s":"easa-part-is-information-security-in-aviation","n":"EASA Part-IS","j":"European Union","v":0,"c":34,"m":18},{"s":"eiopa-guidelines-on-ict-security-and-governance-eiopabos23146-2023","n":"EIOPA Guidelines on ICT Security and Governance (EIOPA-BoS-20/600)","j":"European Union (EIOPA)","v":1,"c":25,"m":18},{"s":"ffiec-cybersecurity-assessment-tool-cat","n":"FFIEC Cybersecurity Assessment Tool (CAT)","j":"United States (FFIEC)","v":0,"c":49,"m":18},{"s":"iso-13485","n":"ISO 13485","j":"International","v":0,"c":29,"m":18},{"s":"isoiec-270062024","n":"ISO/IEC 27006:2024","j":"International","v":0,"c":50,"m":18},{"s":"nist-sp-1800-32","n":"NIST SP 1800-32","j":"United States","v":1,"c":44,"m":18},{"s":"nist-sp-800-150","n":"NIST SP 800-150","j":"United States","v":1,"c":35,"m":18},{"s":"nist-sp-800-53-rev-5-moderate","n":"NIST SP 800-53 Rev 5 MODERATE","j":"United States","v":0,"c":275,"m":18},{"s":"annex-11-to-eu-gmp-computerised-systems","n":"Annex 11 to EU GMP","j":"European Union (EMA/EC)","v":1,"c":17,"m":17},{"s":"chile-personal-data-protection-law-law-no-21719","n":"Chile Personal Data Protection Law (Law No. 21.719)","j":"Chile","v":0,"c":30,"m":17},{"s":"cmmc-2-0-level-1","n":"CMMC 2.0 Level 1","j":"United States","v":1,"c":17,"m":17},{"s":"enisa-privacyenhancing-technologies-pet-reports-and-recommendations","n":"ENISA Data Protection Engineering","j":"European Union (ENISA)","v":1,"c":28,"m":17},{"s":"iso-27799","n":"ISO 27799","j":"International","v":0,"c":46,"m":17},{"s":"isoiec-270102015","n":"ISO/IEC 27010:2015","j":"International","v":0,"c":28,"m":17},{"s":"nist-sp-800-181","n":"NIST SP 800-181","j":"United States","v":1,"c":38,"m":17},{"s":"pci-pin-security","n":"PCI PIN Security","j":"International","v":0,"c":43,"m":17},{"s":"apra-cps-220-risk-management","n":"APRA CPS 220 Risk Management","j":"Australia","v":1,"c":23,"m":16},{"s":"authorised-economic-operator-aeo-programmes-global-standards","n":"Authorised Economic Operator (AEO) Programmes","j":"International (97+ countries)","v":1,"c":36,"m":16},{"s":"bahrain-pdpl","n":"Bahrain PDPL","j":"Bahrain","v":1,"c":29,"m":16},{"s":"cftc-system-safeguards-17-cfr-37-38-39-49","n":"CFTC System Safeguards (17 CFR 37, 38, 39, 49)","j":"United States (CFTC)","v":1,"c":21,"m":16},{"s":"cisa-industrial-control-systems-ics-security-guidance","n":"CISA Industrial Control Systems (ICS) Security Guidance","j":"United States (CISA)","v":1,"c":16,"m":16},{"s":"colorado-artificial-intelligence-act-proposed-sb-24-205","n":"Colorado Artificial Intelligence Act (proposed SB 24-205)","j":"Colorado, United States","v":1,"c":19,"m":16},{"s":"fedramp-moderate","n":"FedRAMP Moderate","j":"United States","v":1,"c":238,"m":16},{"s":"isoiec-270072020","n":"ISO/IEC 27007:2020","j":"International","v":0,"c":28,"m":16},{"s":"pci-p2pe","n":"PCI P2PE","j":"International","v":0,"c":44,"m":16},{"s":"argentina-law-25326-personal-data-protection-law","n":"Argentina Law 25.326 (Personal Data Protection Law)","j":"Argentina","v":1,"c":34,"m":15},{"s":"botswana-data-protection-act-2024","n":"Botswana Data Protection Act (2024)","j":"Botswana","v":1,"c":32,"m":15},{"s":"ccsds-3500-g-3-space-communications-security-consultative-committee-for-space-data-systems","n":"CCSDS 350.0-G-3","j":"International (CCSDS \u2014 11 member agencies)","v":1,"c":17,"m":15},{"s":"connecticut-data-privacy-act-ctdpa","n":"Connecticut Data Privacy Act (CTDPA)","j":"United States \u2014 Connecticut","v":1,"c":26,"m":15},{"s":"digital-services-act-dsa-regulation-eu-20222065","n":"Digital Services Act (DSA)","j":"European Union","v":1,"c":36,"m":15},{"s":"eba-guidelines-on-ict-and-security-risk-management-ebagl202407","n":"EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07)","j":"European Union (EBA)","v":1,"c":28,"m":15},{"s":"eu-ai-act","n":"EU AI Act","j":"European Union","v":1,"c":36,"m":15},{"s":"fbi-cjis-security-policy","n":"FBI CJIS Security Policy","j":"United States (FBI)","v":0,"c":33,"m":15},{"s":"iso-27005","n":"ISO 27005","j":"International","v":0,"c":26,"m":15},{"s":"nist-sp-800-161","n":"NIST SP 800-161","j":"United States","v":1,"c":34,"m":15},{"s":"nist-sp-800-187","n":"NIST SP 800-187","j":"United States","v":1,"c":32,"m":15},{"s":"albania-law-on-protection-of-personal-data-law-no-9887-2008-amended-2014","n":"Albania Law on Protection of Personal Data (Law No. 9887, 2008, amended 2014)","j":"Albania","v":1,"c":22,"m":14},{"s":"anssi-cybersecurity-framework","n":"ANSSI Cybersecurity Framework","j":"France","v":1,"c":23,"m":14},{"s":"armenia-law-on-protection-of-personal-data-2015","n":"Armenia Law on Protection of Personal Data (2015)","j":"Armenia","v":1,"c":18,"m":14},{"s":"australia-irap-information-security-registered-assessors-program","n":"Australia IRAP","j":"Australia (ASD)","v":1,"c":16,"m":14},{"s":"australia-nhmrc-national-statement-on-ethical-conduct-in-human-research","n":"Australia NHMRC National Statement on Ethical Conduct in Human Research","j":"Australia (NHMRC)","v":1,"c":27,"m":14},{"s":"cambodia-sub-decree-on-personal-data-protection-sub-decree-no-134","n":"Cambodia Sub-Decree on Personal Data Protection (Sub-Decree No. 134)","j":"Cambodia","v":0,"c":20,"m":14},{"s":"colorado-privacy-act","n":"Colorado Privacy Act","j":"United States - Colorado","v":1,"c":21,"m":14},{"s":"eu-in-vitro-diagnostic-medical-devices-regulation-ivdr","n":"EU In Vitro Diagnostic Medical Devices Regulation (IVDR)","j":"European Union","v":1,"c":26,"m":14},{"s":"isoiec-270312011","n":"ISO/IEC 27031:2011","j":"International","v":0,"c":27,"m":14},{"s":"isoiec-275572022-organisational-privacy-risk-management","n":"ISO/IEC 27557:2022","j":"International (ISO/IEC)","v":0,"c":35,"m":14},{"s":"act-on-the-implementation-of-the-general-data-protection-regulation-og-422018","n":"Act on the Implementation of the General Data Protection Regulation (OG 42/2018)","j":"Croatia","v":1,"c":44,"m":13},{"s":"aicpa-soc-3","n":"AICPA SOC 3","j":"United States","v":0,"c":22,"m":13},{"s":"australia-my-health-records-act-2012","n":"Australia My Health Records Act 2012","j":"Australia","v":1,"c":22,"m":13},{"s":"coppa","n":"COPPA","j":"United States","v":1,"c":21,"m":13},{"s":"csa-star-security-trust-assurance-and-risk","n":"CSA STAR (Security, Trust, Assurance, and Risk)","j":"International","v":1,"c":24,"m":13},{"s":"esrb-privacy-certified","n":"ESRB Privacy Certified","j":"United States (ESRB / FTC)","v":0,"c":20,"m":13},{"s":"eu-medical-devices-regulation-mdr-2017745","n":"EU Medical Devices Regulation (MDR 2017/745)","j":"European Union","v":1,"c":26,"m":13},{"s":"iso-260002010","n":"ISO 26000:2010","j":"International","v":0,"c":57,"m":13},{"s":"isoiec-274002022","n":"ISO/IEC 27400:2022","j":"International","v":0,"c":27,"m":13},{"s":"nist-sp-800-53-rev-5-low","n":"NIST SP 800-53 Rev 5 LOW","j":"United States","v":0,"c":173,"m":13},{"s":"pci-dss-4-0","n":"PCI DSS 4.0","j":"International","v":0,"c":168,"m":13},{"s":"belgium-data-protection-act-wet-van-30-juli-2018-loi-du-30-juillet-2018","n":"Belgium Data Protection Act (Wet van 30 juli 2018, Loi du 30 juillet 2018)","j":"Belgium","v":1,"c":20,"m":12},{"s":"brcgs-global-standard-for-food-safety-issue-9","n":"BRCGS Global Standard for Food Safety Issue 9","j":"International (GFSI-benchmarked)","v":0,"c":39,"m":12},{"s":"circia-cyber-incident-reporting-for-critical-infrastructure-act","n":"CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act)","j":"United States","v":1,"c":22,"m":12},{"s":"code-of-conduct-on-data-protection-for-research-gdpr-article-40","n":"Code of Conduct on Data Protection for Research (GDPR Article 40)","j":"European Union","v":0,"c":20,"m":12},{"s":"consumer-data-right-cdr-framework-australia","n":"Consumer Data Right (CDR) Framework (Australia)","j":"Australia","v":0,"c":33,"m":12},{"s":"eidas-20-eu-digital-identity-regulation","n":"eIDAS 2.0","j":"European Union","v":1,"c":53,"m":12},{"s":"federal-decree-law-no-45-of-2021-on-the-protection-of-personal-data-pdpl","n":"Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)","j":"United Arab Emirates","v":1,"c":12,"m":12},{"s":"iso-14001","n":"ISO 14001","j":"International","v":0,"c":15,"m":12},{"s":"iso-204002017-sustainable-procurement","n":"ISO 20400:2017","j":"International","v":0,"c":40,"m":12},{"s":"iso-223202018","n":"ISO 22320:2018","j":"International","v":0,"c":36,"m":12},{"s":"iso-262622018-functional-safety-for-road-vehicles","n":"ISO 26262:2018","j":"International (ISO)","v":0,"c":69,"m":12},{"s":"iso-370002021-governance-of-organizations","n":"ISO 37000:2021","j":"International (ISO)","v":0,"c":26,"m":12},{"s":"isoiec-250122008-data-quality-model","n":"ISO/IEC 25012:2008","j":"International (ISO/IEC)","v":0,"c":36,"m":12},{"s":"nist-sp-800-183","n":"NIST SP 800-183","j":"United States","v":1,"c":30,"m":12},{"s":"african-union-malabo-convention","n":"African Union Malabo Convention","j":"Africa (AU)","v":1,"c":28,"m":11},{"s":"aged-care-quality-standards-australia","n":"Aged Care Quality Standards (Australia)","j":"Australia","v":1,"c":42,"m":11},{"s":"angola-personal-data-protection-law-law-no-2211","n":"Angola Personal Data Protection Law (Law No. 22/11)","j":"Angola","v":1,"c":23,"m":11},{"s":"apec-cross-border-privacy-rules-cbpr-system","n":"APEC Cross-Border Privacy Rules (CBPR) System","j":"Asia-Pacific (APEC)","v":1,"c":20,"m":11},{"s":"ccpacpra","n":"CCPA/CPRA","j":"United States - California","v":1,"c":31,"m":11},{"s":"cis-controls-v8","n":"CIS Controls v8","j":"International","v":1,"c":153,"m":11},{"s":"fair-labor-association-fla-workplace-code-of-conduct","n":"Fair Labor Association (FLA) Workplace Code of Conduct","j":"International (FLA)","v":0,"c":13,"m":11},{"s":"nfpa-1600-standard-on-continuity-emergency-and-crisis-management","n":"NFPA 1600","j":"United States (NFPA)","v":0,"c":35,"m":11},{"s":"nist-sp-800-66-rev-2","n":"NIST SP 800-66 Rev 2","j":"United States","v":1,"c":65,"m":11},{"s":"sans-incident-handlers-handbook-and-picerl-methodology","n":"SANS Incident Handler's Handbook and PICERL Methodology","j":"International (SANS Institute)","v":0,"c":40,"m":11},{"s":"austria-data-protection-act-datenschutzgesetz-dsg-amended-2018","n":"Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)","j":"Austria","v":1,"c":14,"m":10},{"s":"bcbs-239","n":"BCBS 239","j":"International","v":1,"c":14,"m":10},{"s":"bermuda-personal-information-protection-act-2016-pipa","n":"Bermuda Personal Information Protection Act 2016 (PIPA)","j":"Bermuda","v":1,"c":24,"m":10},{"s":"brazil-ai-framework","n":"Brazil AI Framework","j":"Brazil","v":1,"c":28,"m":10},{"s":"cayman-islands-data-protection-act-2017-dpa","n":"Cayman Islands Data Protection Act 2017 (DPA)","j":"Cayman Islands","v":1,"c":22,"m":10},{"s":"china-cybersecurity-law-csl","n":"China Cybersecurity Law (CSL)","j":"China","v":0,"c":22,"m":10},{"s":"china-data-security-law-dsl","n":"China Data Security Law (DSL)","j":"China","v":0,"c":21,"m":10},{"s":"ethiopia-personal-data-protection-proclamation-no-13212024","n":"Ethiopia Personal Data Protection Proclamation (No. 1321/2024)","j":"Ethiopia","v":1,"c":24,"m":10},{"s":"eu-ai-liability-directive","n":"EU AI Liability Directive","j":"European Union","v":0,"c":18,"m":10},{"s":"eu-clinical-trials-regulation-ctr-5362014","n":"EU Clinical Trials Regulation (CTR 536/2014)","j":"European Union","v":1,"c":30,"m":10},{"s":"fda-21-cfr-part-11","n":"FDA 21 CFR Part 11","j":"United States","v":1,"c":13,"m":10},{"s":"fda-quality-management-system-regulation-qmsr","n":"FDA Quality Management System Regulation (QMSR)","j":"United States","v":1,"c":13,"m":10},{"s":"hipaa-security-rule","n":"HIPAA Security Rule","j":"United States","v":1,"c":66,"m":10},{"s":"iacs-unified-requirements-e26e27-cyber-resilience-of-ships-and-on-board-systems","n":"IACS Unified Requirements E26/E27","j":"International (IACS \u2014 12 classification societies)","v":1,"c":19,"m":10},{"s":"iec-623042015-medical-device-software-lifecycle-processes","n":"IEC 62304:2015 Medical Device Software Lifecycle Processes","j":"International","v":0,"c":33,"m":10},{"s":"iso-22316","n":"ISO 22316","j":"International","v":0,"c":33,"m":10},{"s":"itil-4","n":"ITIL 4","j":"International","v":0,"c":53,"m":10},{"s":"nist-sp-800-124-revision-2-guidelines-for-managing-the-security-of-mobile-devices","n":"NIST SP 800-124 Revision 2","j":"United States","v":1,"c":34,"m":10},{"s":"barbados-data-protection-act-2019","n":"Barbados Data Protection Act 2019","j":"Barbados","v":1,"c":23,"m":9},{"s":"bosnia-and-herzegovina-law-on-protection-of-personal-data-2006-amended-2011","n":"Bosnia and Herzegovina Law on Protection of Personal Data (2006, amended 2011)","j":"Bosnia and Herzegovina","v":1,"c":23,"m":9},{"s":"brazil-open-finance-resoluo-conjunta-no-12020","n":"Brazil Open Finance (Resolu\u00e7\u00e3o Conjunta No. 1/2020)","j":"Brazil","v":1,"c":30,"m":9},{"s":"bs-650002014-guidance-on-organizational-resilience","n":"BS 65000:2014","j":"United Kingdom (BSI)","v":0,"c":26,"m":9},{"s":"coso-internal-control-integrated-framework-2013","n":"COSO Internal Control","j":"International","v":0,"c":48,"m":9},{"s":"csrd","n":"CSRD","j":"European Union","v":1,"c":22,"m":9},{"s":"dama-dmbok2-data-management-body-of-knowledge-2nd-edition","n":"DAMA-DMBOK2","j":"International (DAMA International)","v":0,"c":46,"m":9},{"s":"egypt-personal-data-protection-law-law-no-151-of-2020","n":"Egypt Personal Data Protection Law (Law No. 151 of 2020)","j":"Egypt","v":0,"c":48,"m":9},{"s":"en-301-549-ict-accessibility-requirements","n":"EN 301 549","j":"European Union","v":1,"c":42,"m":9},{"s":"eu-audiovisual-media-services-directive-avmsd-directive-201013eu-as-amended-by-directive-20181808-and-directive-eu-20232586","n":"EU Audiovisual Media Services Directive (AVMSD, Directive 2010/13/EU as amended by Directive 2018/1808 and Directive (EU) 2023/2586)","j":"European Union","v":1,"c":30,"m":9},{"s":"iais-insurance-core-principles-icps","n":"IAIS Insurance Core Principles (ICPs)","j":"International (IAIS)","v":0,"c":47,"m":9},{"s":"iso-10006-2003","n":"ISO 10006:2003","j":"International","v":1,"c":17,"m":9},{"s":"iso-14064-greenhouse-gas-accounting-and-verification-parts-1-3","n":"ISO 14064","j":"International (ISO)","v":0,"c":42,"m":9},{"s":"iso-22317","n":"ISO 22317","j":"International","v":0,"c":36,"m":9},{"s":"iso-22318","n":"ISO 22318","j":"International","v":0,"c":36,"m":9},{"s":"isoiec-385002024-governance-of-it","n":"ISO/IEC 38500:2024","j":"International (ISO/IEC)","v":0,"c":38,"m":9},{"s":"owasp-top-102025","n":"OWASP Top 10:2025","j":"International","v":1,"c":10,"m":9},{"s":"australia-ai-ethics-framework","n":"Australia AI Ethics Framework","j":"Australia","v":1,"c":8,"m":8},{"s":"automotive-spice-aspice-v40-process-assessment-model","n":"Automotive SPICE (ASPICE) v4.0","j":"International (VDA/Automotive)","v":0,"c":31,"m":8},{"s":"brunei-personal-data-protection-order-2022-pdpo","n":"Brunei Personal Data Protection Order 2022 (PDPO)","j":"Brunei Darussalam","v":1,"c":31,"m":8},{"s":"c-tpat-customs-trade-partnership-against-terrorism","n":"C-TPAT","j":"United States (CBP)","v":1,"c":12,"m":8},{"s":"canadas-anti-spam-legislation-casl","n":"Canada's Anti-Spam Legislation (CASL)","j":"Canada","v":1,"c":22,"m":8},{"s":"costa-rica-personal-data-protection-law-law-no-8968-as-amended-by-executive-decree-no-42089-mgp","n":"Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP","j":"Costa Rica","v":1,"c":24,"m":8},{"s":"data-protection-act-2017","n":"Data Protection Act 2017","j":"Mauritius","v":1,"c":22,"m":8},{"s":"edm-council-cdmc-cloud-data-management-capability-framework","n":"EDM Council CDMC","j":"International (EDM Council)","v":0,"c":14,"m":8},{"s":"etsi-en-303-645","n":"ETSI EN 303 645","j":"European Union","v":1,"c":15,"m":8},{"s":"eu-better-internet-for-kids-bik-strategy","n":"EU Better Internet for Kids (BIK+) Strategy","j":"European Union","v":0,"c":20,"m":8},{"s":"eu-cyber-solidarity-act-regulation-eu-202538","n":"EU Cyber Solidarity Act (Regulation (EU) 2025/38)","j":"European Union","v":1,"c":18,"m":8},{"s":"eu-product-liability-directive-directive-eu-20232845","n":"EU Product Liability Directive (Directive (EU) 2024/2853)","j":"European Union","v":1,"c":18,"m":8},{"s":"ferpa","n":"Family Educational Rights and Privacy Act (FERPA)","j":"United States","v":1,"c":15,"m":8},{"s":"iaea-nuclear-security-series-computer-security-at-nuclear-facilities-nss-17-t-rev-1","n":"IAEA Nuclear Security Series","j":"International (IAEA)","v":1,"c":11,"m":8},{"s":"iso-20000-1","n":"ISO 20000-1","j":"International","v":0,"c":27,"m":8},{"s":"isoiec-291002024","n":"ISO/IEC 29100:2024","j":"International","v":0,"c":37,"m":8},{"s":"isoiec-291472018","n":"ISO/IEC 29147:2018","j":"International","v":0,"c":34,"m":8},{"s":"isoiec-301112019","n":"ISO/IEC 30111:2019","j":"International","v":0,"c":28,"m":8},{"s":"jamaica-data-protection-act-2020","n":"Jamaica Data Protection Act 2020","j":"Jamaica","v":1,"c":17,"m":8},{"s":"japan-ai-guidelines","n":"Japan AI Guidelines","j":"Japan","v":1,"c":13,"m":8},{"s":"kotter-8-step-change-model","n":"Kotter 8-Step Change Model","j":"International","v":1,"c":8,"m":8},{"s":"nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production","n":"NATO AQAP 2110","j":"International (NATO \u2014 31 member nations)","v":1,"c":8,"m":8},{"s":"nebraska-data-privacy-act","n":"Nebraska Data Privacy Act","j":"United States - Nebraska","v":1,"c":8,"m":8},{"s":"nigeria-data-protection-act-2023-ndpa","n":"Nigeria Data Protection Act 2023 (NDPA)","j":"Nigeria","v":1,"c":8,"m":8},{"s":"nist-privacy-framework","n":"NIST Privacy Framework","j":"United States","v":1,"c":8,"m":8},{"s":"nist-sp-800-82-revision-3-guide-to-industrial-control-systems-ics-security","n":"NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security","j":"United States","v":1,"c":8,"m":8},{"s":"oecd-ai-principles","n":"OECD AI Principles","j":"International","v":1,"c":8,"m":8},{"s":"oecd-recommendation-on-artificial-intelligence-2024-update","n":"OECD Recommendation on Artificial Intelligence (2024 Update)","j":"International (OECD)","v":1,"c":8,"m":8},{"s":"owasp-asvs","n":"OWASP ASVS","j":"International","v":1,"c":14,"m":8},{"s":"pdpa-singapore","n":"PDPA Singapore","j":"Singapore","v":1,"c":8,"m":8},{"s":"argyris-double-loop-learning","n":"Argyris Double-Loop Learning","j":"International","v":0,"c":27,"m":7},{"s":"azerbaijan-law-on-personal-data-2010","n":"Azerbaijan Law on Personal Data (2010)","j":"Azerbaijan","v":0,"c":15,"m":7},{"s":"breeam-building-research-establishment-environmental-assessment-method","n":"BREEAM","j":"International (BRE Global)","v":0,"c":47,"m":7},{"s":"commercial-national-security-algorithm-suite-cnsa-20","n":"Commercial National Security Algorithm Suite (CNSA) 2.0","j":"United States (National Security Agency)","v":0,"c":14,"m":7},{"s":"estonia-personal-data-protection-act-isikuandmete-kaitse-seadus-2019","n":"Estonia Personal Data Protection Act (Isikuandmete kaitse seadus, 2019)","j":"Estonia","v":1,"c":25,"m":7},{"s":"eu-data-governance-act-dga","n":"EU Data Governance Act (DGA)","j":"European Union","v":1,"c":19,"m":7},{"s":"european-accessibility-act-directive-eu-2019882","n":"European Accessibility Act (Directive (EU) 2019/882)","j":"European Union","v":1,"c":16,"m":7},{"s":"ftc-glba-safeguards-rule-16-cfr-part-314","n":"FTC GLBA Safeguards Rule (16 CFR Part 314)","j":"United States (FTC)","v":1,"c":11,"m":7},{"s":"iatf-169492016-quality-management-system-for-automotive-production","n":"IATF 16949:2016","j":"International (IATF)","v":0,"c":10,"m":7},{"s":"ich-e6r3-good-clinical-practice","n":"ICH E6(R3)","j":"International (ICH)","v":1,"c":9,"m":7},{"s":"iec-60601-1-medical-electrical-equipment-safety","n":"IEC 60601-1","j":"International","v":0,"c":37,"m":7},{"s":"iec-62351-power-systems-communication-security","n":"IEC 62351","j":"International (IEC)","v":0,"c":33,"m":7},{"s":"indonesia-pdp-law","n":"Indonesia PDP Law","j":"Indonesia","v":1,"c":10,"m":7},{"s":"iowa-consumer-data-protection-act","n":"Iowa Consumer Data Protection Act","j":"United States - Iowa","v":1,"c":8,"m":7},{"s":"iso-10007-2017","n":"ISO 10007:2017","j":"International","v":1,"c":8,"m":7},{"s":"isoiec-270042016","n":"ISO/IEC 27004:2016","j":"International","v":0,"c":27,"m":7},{"s":"malaysia-pdpa-2010","n":"Malaysia PDPA 2010","j":"Malaysia","v":1,"c":8,"m":7},{"s":"mars-e","n":"MARS-E","j":"United States","v":1,"c":8,"m":7},{"s":"mauritius-dpa","n":"Mauritius DPA","j":"Mauritius","v":1,"c":8,"m":7},{"s":"montana-consumer-data-privacy-act","n":"Montana Consumer Data Privacy Act","j":"United States - Montana","v":1,"c":8,"m":7},{"s":"mtcs-singapore","n":"MTCS (Singapore)","j":"Singapore","v":1,"c":8,"m":7},{"s":"nis2-directive","n":"NIS2 Directive","j":"European Union","v":1,"c":8,"m":7},{"s":"nist-sp-800-144","n":"NIST SP 800-144","j":"United States","v":1,"c":8,"m":7},{"s":"nist-sp-800-92","n":"NIST SP 800-92","j":"United States","v":1,"c":8,"m":7},{"s":"nsa-guidance-for-transition-to-quantum-resistant-cryptography","n":"NSA Guidance for Transition to Quantum-Resistant Cryptography","j":"United States (National Security Agency)","v":0,"c":29,"m":7},{"s":"openssf-scorecard","n":"OpenSSF Scorecard","j":"International","v":1,"c":8,"m":7},{"s":"owasp-masvs","n":"OWASP MASVS","j":"International","v":1,"c":8,"m":7},{"s":"pics-guide-to-good-manufacturing-practice-for-medicinal-products","n":"PIC/S Guide to Good Manufacturing Practice for Medicinal Products","j":"International (PIC/S \u2014 54 member authorities)","v":1,"c":9,"m":7},{"s":"privacy-act-1988-australia","n":"Privacy Act 1988 (Australia)","j":"Australia","v":1,"c":8,"m":7},{"s":"soc-1-ssae-18","n":"SOC 1 (SSAE 18 / ISAE 3402)","j":"United States (AICPA) and International (ISAE 3402)","v":0,"c":32,"m":7},{"s":"space-isac-information-sharing-and-analysis-center-threat-framework","n":"Space ISAC (Information Sharing and Analysis Center)","j":"International (Space Industry)","v":0,"c":40,"m":7},{"s":"swift-cscf","n":"SWIFT CSCF","j":"International","v":1,"c":8,"m":7},{"s":"basel-iii-international-banking-framework","n":"Basel III International Banking Framework","j":"International","v":1,"c":28,"m":6},{"s":"critical-infrastructure-risk-management-program-cirmp-rules-2023","n":"Critical Infrastructure Risk Management Program (CIRMP) Rules 2023","j":"Australia","v":0,"c":11,"m":6},{"s":"dfars-252204-7012-safeguarding-covered-defense-information","n":"DFARS 252.204-7012","j":"United States (DoD)","v":1,"c":11,"m":6},{"s":"disa-security-technical-implementation-guides-stigs","n":"DISA Security Technical Implementation Guides (STIGs)","j":"United States","v":0,"c":22,"m":6},{"s":"emv-3d-secure-3ds-payment-authentication-protocol","n":"EMV 3\u2011D Secure (3DS)","j":"International (EMVCo - standards consortium)","v":0,"c":22,"m":6},{"s":"eu-data-act","n":"EU Data Act","j":"European Union","v":1,"c":27,"m":6},{"s":"eu-machinery-regulation-regulation-eu-20231230","n":"EU Machinery Regulation (Regulation (EU) 2023/1230)","j":"European Union","v":1,"c":20,"m":6},{"s":"eu-network-code-on-cybersecurity-for-the-electricity-sector","n":"EU Network Code on Cybersecurity for the Electricity Sector","j":"European Union","v":1,"c":17,"m":6},{"s":"eu-payment-services-directive-psd2","n":"EU Payment Services Directive (PSD2)","j":"European Union","v":1,"c":19,"m":6},{"s":"eu-sfdr-sustainable-finance-disclosure-regulation","n":"EU SFDR (Sustainable Finance Disclosure Regulation)","j":"European Union","v":1,"c":18,"m":6},{"s":"faa-cybersecurity-framework-for-aviation","n":"FAA Cybersecurity Framework for Aviation","j":"United States (FAA)","v":0,"c":15,"m":6},{"s":"fcc-customer-proprietary-network-information-cpni-and-data-breach-rules-47-cfr-642001-2011","n":"FCC Customer Proprietary Network Information (CPNI) and Data Breach Rules (47 CFR 64.2001-2011)","j":"United States (FCC)","v":1,"c":13,"m":6},{"s":"fedramp-rev-5","n":"FedRAMP Rev 5","j":"United States","v":0,"c":12,"m":6},{"s":"florida-digital-bill-of-rights-fdbr","n":"Florida Digital Bill of Rights (FDBR)","j":"United States","v":1,"c":12,"m":6},{"s":"ghana-cybersecurity-act","n":"Ghana Cybersecurity Act","j":"Ghana","v":1,"c":12,"m":6},{"s":"hitech-act","n":"HITECH Act","j":"United States","v":0,"c":11,"m":6},{"s":"icao-annex-17-aviation-security-avsec","n":"ICAO Annex 17","j":"International (ICAO)","v":1,"c":10,"m":6},{"s":"icn-leadership-for-change-programme","n":"ICN Leadership for Change Programme","j":"International","v":1,"c":12,"m":6},{"s":"ieee-1686","n":"IEEE 1686","j":"International","v":0,"c":7,"m":6},{"s":"indiana-consumer-data-protection-act","n":"Indiana Consumer Data Protection Act","j":"United States - Indiana","v":1,"c":8,"m":6},{"s":"iso-19650-organisation-and-digitisation-of-information-about-buildings-and-civil-engineering-works-bim","n":"ISO 19650","j":"International (ISO)","v":0,"c":44,"m":6},{"s":"iso-227392024-blockchain-and-distributed-ledger-technologies-vocabulary","n":"ISO 22739:2024","j":"International (ISO/TC 307)","v":0,"c":39,"m":6},{"s":"isoiec-291342023","n":"ISO/IEC 29134:2023","j":"International","v":0,"c":39,"m":6},{"s":"liechtenstein-dpa","n":"Liechtenstein DPA","j":"Liechtenstein","v":1,"c":8,"m":6},{"s":"mexico-lfpdppp","n":"Mexico LFPDPPP","j":"Mexico","v":1,"c":8,"m":6},{"s":"minnesota-consumer-data-privacy-act","n":"Minnesota Consumer Data Privacy Act","j":"United States - Minnesota","v":1,"c":8,"m":6},{"s":"mitre-attck","n":"MITRE ATT&CK","j":"International","v":1,"c":8,"m":6},{"s":"mitre-d3fend","n":"MITRE D3FEND","j":"International","v":1,"c":8,"m":6},{"s":"monetary-authority-of-singapore-technology-risk-management-guidelines","n":"Monetary Authority of Singapore Technology Risk Management Guidelines","j":"Singapore","v":1,"c":8,"m":6},{"s":"nigeria-data-protection-regulation-ndpr","n":"Nigeria Data Protection Regulation (NDPR)","j":"Nigeria","v":1,"c":8,"m":6},{"s":"nist-sp-800-122","n":"NIST SP 800-122","j":"United States","v":1,"c":8,"m":6},{"s":"nist-sp-800-171-rev-3","n":"NIST SP 800-171 Rev 3","j":"United States","v":1,"c":97,"m":6},{"s":"nist-sp-800-30","n":"NIST SP 800-30","j":"United States","v":1,"c":8,"m":6},{"s":"nist-sp-800-63-4","n":"NIST SP 800-63-4","j":"United States","v":1,"c":8,"m":6},{"s":"o-ran-wg11-security-specification","n":"O-RAN WG11 Security Specification","j":"International (O-RAN Alliance)","v":1,"c":8,"m":6},{"s":"oman-national-cybersecurity-framework","n":"Oman National Cybersecurity Framework","j":"Oman","v":1,"c":8,"m":6},{"s":"oregon-consumer-privacy-act","n":"Oregon Consumer Privacy Act","j":"United States - Oregon","v":1,"c":8,"m":6},{"s":"owasp-devsecops-maturity-model-dsomm","n":"OWASP DevSecOps Maturity Model (DSOMM)","j":"International","v":1,"c":6,"m":6},{"s":"pdpa-thailand","n":"PDPA Thailand","j":"Thailand","v":1,"c":8,"m":6},{"s":"personal-data-act-personopplysningsloven","n":"Personal Data Act (personopplysningsloven)","j":"Norway","v":1,"c":8,"m":6},{"s":"peru-dpl","n":"Peru DPL","j":"Peru","v":1,"c":8,"m":6},{"s":"popia","n":"POPIA","j":"South Africa","v":1,"c":8,"m":6},{"s":"privacy-act-2020","n":"Privacy Act 2020","j":"New Zealand","v":1,"c":8,"m":6},{"s":"danish-data-protection-act-databeskyttelsesloven","n":"Danish Data Protection Act (Databeskyttelsesloven)","j":"Denmark","v":1,"c":22,"m":5},{"s":"defence-industry-security-program-disp","n":"Defence Industry Security Program (DISP)","j":"Australia","v":1,"c":18,"m":5},{"s":"defence-security-principles-framework-dspf","n":"Defence Security Principles Framework (DSPF)","j":"Australia","v":1,"c":21,"m":5},{"s":"directive-eu-20191937-on-the-protection-of-persons-who-report-breaches-of-union-law","n":"Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law","j":"European Union","v":1,"c":21,"m":5},{"s":"edm-council-dcam-data-management-capability-assessment-model","n":"EDM Council DCAM","j":"International (EDM Council)","v":0,"c":27,"m":5},{"s":"eu-cra","n":"EU Cyber Resilience Act","j":"European Union","v":1,"c":24,"m":5},{"s":"eu-european-media-freedom-act-emfa","n":"EU European Media Freedom Act (EMFA)","j":"European Union","v":1,"c":21,"m":5},{"s":"eu-general-product-safety-regulation-gpsr-regulation-2023988","n":"EU General Product Safety Regulation (GPSR, Regulation 2023/988)","j":"European Union","v":1,"c":22,"m":5},{"s":"eu-taxonomy-regulation","n":"EU Taxonomy Regulation","j":"European Union","v":1,"c":16,"m":5},{"s":"gamp-5-good-automated-manufacturing-practice","n":"GAMP 5","j":"International","v":0,"c":11,"m":5},{"s":"gs1-global-standards-supply-chain-traceability-and-data-security","n":"GS1 Global Standards","j":"International (GS1 \u2014 116 countries)","v":1,"c":13,"m":5},{"s":"heifetz-adaptive-leadership-framework","n":"Heifetz Adaptive Leadership Framework","j":"International","v":0,"c":12,"m":5},{"s":"iceland-data-protection-and-processing-of-personal-data-act-act-no-902018","n":"Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018)","j":"Iceland","v":1,"c":8,"m":5},{"s":"ich-q10-pharmaceutical-quality-system","n":"ICH Q10","j":"International (ICH)","v":1,"c":6,"m":5},{"s":"ieee-7000","n":"IEEE 7000","j":"International","v":0,"c":9,"m":5},{"s":"ilo-declaration-on-fundamental-principles-and-rights-at-work-core-conventions","n":"ILO Declaration on Fundamental Principles and Rights at Work (Core Conventions)","j":"International (ILO \u2014 187 member states)","v":1,"c":8,"m":5},{"s":"imo-maritime-cybersecurity-guidelines-msc-fal1circ3rev2","n":"IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.2)","j":"International (IMO)","v":1,"c":8,"m":5},{"s":"india-dpdp-act","n":"India DPDP Act","j":"India","v":1,"c":8,"m":5},{"s":"ismap-japan","n":"ISMAP (Japan)","j":"Japan","v":1,"c":8,"m":5},{"s":"isoiec-291152023-entity-authentication-assurance-framework","n":"ISO/IEC 29115:2023","j":"International (ISO/IEC)","v":0,"c":38,"m":5},{"s":"kentucky-consumer-data-protection-act","n":"Kentucky Consumer Data Protection Act","j":"United States - Kentucky","v":1,"c":8,"m":5},{"s":"kolb-experiential-learning-cycle","n":"Kolb Experiential Learning Cycle","j":"International","v":1,"c":8,"m":5},{"s":"law-no-172-13-on-the-protection-of-personal-data","n":"Law No. 172-13 on the Protection of Personal Data","j":"Dominican Republic","v":1,"c":8,"m":5},{"s":"leads-in-a-caring-environment","n":"LEADS in a Caring Environment","j":"International","v":1,"c":5,"m":5},{"s":"ley-orgnica-de-proteccin-de-datos-personales-lopdp","n":"Ley Org\u00e1nica de Protecci\u00f3n de Datos Personales (LOPDP)","j":"Ecuador","v":1,"c":8,"m":5},{"s":"lgpd","n":"LGPD","j":"Brazil","v":1,"c":8,"m":5},{"s":"maryland-online-data-privacy-act-of-2024","n":"Maryland Online Data Privacy Act of 2024","j":"United States - Maryland","v":1,"c":8,"m":5},{"s":"mds2-medical-device","n":"MDS2 (Medical Device)","j":"United States","v":1,"c":8,"m":5},{"s":"nevada-gaming-control-board-cybersecurity-requirements","n":"Nevada Gaming Control Board Cybersecurity Requirements","j":"United States \u2014 Nevada","v":1,"c":8,"m":5},{"s":"new-hampshire-data-privacy-act","n":"New Hampshire Data Privacy Act","j":"United States - New Hampshire","v":1,"c":8,"m":5},{"s":"new-jersey-data-privacy-act","n":"New Jersey Data Privacy Act","j":"United States - New Jersey","v":1,"c":8,"m":5},{"s":"nhs-healthcare-leadership-model","n":"NHS Healthcare Leadership Model","j":"United Kingdom","v":1,"c":8,"m":5},{"s":"nis2-directive-implementing-acts","n":"NIS2 Directive Implementing Acts","j":"European Union","v":1,"c":8,"m":5},{"s":"nist-post-quantum-cryptography-standards-fips-203-204-205","n":"NIST Post-Quantum Cryptography Standards (FIPS 203, 204, 205)","j":"United States (NIST)","v":1,"c":8,"m":5},{"s":"nist-sp-800-123","n":"NIST SP 800-123","j":"United States","v":1,"c":8,"m":5},{"s":"nist-sp-800-137","n":"NIST SP 800-137","j":"United States","v":1,"c":8,"m":5},{"s":"nist-sp-800-145","n":"NIST SP 800-145","j":"United States","v":1,"c":8,"m":5},{"s":"nist-sp-800-61","n":"NIST SP 800-61","j":"United States","v":1,"c":8,"m":5},{"s":"nist-sp-800-88","n":"NIST SP 800-88","j":"United States","v":1,"c":8,"m":5},{"s":"nist-special-publication-800-34-revision-1-contingency-planning-guide-for-federal-information-systems","n":"NIST Special Publication 800-34 Revision 1, Contingency Planning Guide for Federal Information Systems","j":"United States","v":1,"c":8,"m":5},{"s":"oecd-guidelines-for-multinational-enterprises-on-responsible-business-conduct-2023-update","n":"OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023 Update)","j":"International (OECD \u2014 51 adhering governments)","v":1,"c":8,"m":5},{"s":"oecdg20-principles-of-corporate-governance","n":"OECD/G20 Principles of Corporate Governance","j":"International","v":1,"c":8,"m":5},{"s":"open-banking-security","n":"Open Banking Security","j":"United Kingdom","v":1,"c":8,"m":5},{"s":"osfi-b-13","n":"OSFI B-13","j":"Canada","v":1,"c":8,"m":5},{"s":"owasp-top-10-for-llm-applications-2025","n":"OWASP Top 10 for LLM Applications 2025","j":"International","v":1,"c":8,"m":5},{"s":"pakistan-personal-data-protection-bill-2023","n":"Pakistan Personal Data Protection Bill 2023","j":"Pakistan","v":1,"c":8,"m":5},{"s":"qatar-dpl","n":"Qatar DPL","j":"Qatar","v":1,"c":8,"m":5},{"s":"regulation-on-the-european-health-data-space-ehds","n":"Regulation on the European Health Data Space (EHDS)","j":"European Union","v":1,"c":6,"m":5},{"s":"south-korea-pipa","n":"South Korea PIPA","j":"South Korea","v":1,"c":8,"m":5},{"s":"trinidad-and-tobago-data-protection-act-2011","n":"Trinidad and Tobago Data Protection Act 2011","j":"Trinidad and Tobago","v":1,"c":5,"m":5},{"s":"uruguay-dpl","n":"Uruguay DPL","j":"Uruguay","v":1,"c":6,"m":5},{"s":"aasb-s2-climate-related-disclosures","n":"AASB S2 Climate-related Disclosures","j":"Australia","v":1,"c":21,"m":4},{"s":"australia-esafety-commissioner-online-safety-expectations-for-industry","n":"Australia eSafety Commissioner","j":"Australia (eSafety Commissioner)","v":1,"c":18,"m":4},{"s":"cyber-security-act-2024-australia","n":"Cyber Security Act 2024 (Australia)","j":"Australia","v":0,"c":17,"m":4},{"s":"data-use-and-access-act-2025","n":"Data (Use and Access) Act 2025","j":"United Kingdom","v":1,"c":18,"m":4},{"s":"delaware-online-privacy-and-protection-act-proposed","n":"Delaware Online Privacy and Protection Act (proposed)","j":"United States - Delaware","v":1,"c":8,"m":4},{"s":"equator-principles-ep4-2020","n":"Equator Principles (EP4, 2020)","j":"International (Equator Principles Association)","v":1,"c":10,"m":4},{"s":"eu-carbon-border-adjustment-mechanism-cbam","n":"EU Carbon Border Adjustment Mechanism (CBAM)","j":"European Union","v":1,"c":24,"m":4},{"s":"eu-energy-performance-of-buildings-directive-epbd-recast-draft-directive-20230317-cod","n":"EU Energy Performance of Buildings Directive (EPBD Recast)","j":"European Union","v":1,"c":21,"m":4},{"s":"eu-eprivacy-directive-200258ec","n":"EU ePrivacy Directive (2002/58/EC)","j":"European Union","v":1,"c":15,"m":4},{"s":"eu-web-accessibility-directive-directive-20162102","n":"EU Web Accessibility Directive (Directive 2016/2102)","j":"European Union","v":1,"c":14,"m":4},{"s":"french-sapin-ii-law-law-no-2016-1691","n":"French Sapin II Law (Law No. 2016-1691)","j":"France","v":1,"c":14,"m":4},{"s":"german-supply-chain-due-diligence-act-lksg","n":"German Supply Chain Due Diligence Act (LkSG)","j":"Germany","v":1,"c":11,"m":4},{"s":"ghg-protocol","n":"GHG Protocol","j":"International","v":1,"c":12,"m":4},{"s":"glba","n":"GLBA","j":"United States","v":0,"c":12,"m":4},{"s":"goleman-emotional-intelligence-leadership-framework","n":"Goleman Emotional Intelligence Leadership Framework","j":"International","v":0,"c":12,"m":4},{"s":"gri-standards","n":"GRI Standards","j":"International","v":1,"c":12,"m":4},{"s":"illinois-biometric-information-privacy-act-bipa","n":"Illinois Biometric Information Privacy Act (BIPA)","j":"United States","v":0,"c":32,"m":4},{"s":"india-cert-in-cyber-security-directions-2022","n":"India CERT-In Cyber Security Directions 2022","j":"India","v":1,"c":8,"m":4},{"s":"isae-3402-assurance-reports-on-controls-at-a-service-organisation","n":"ISAE 3402","j":"International (IAASB)","v":0,"c":34,"m":4},{"s":"isoiec-27050-electronic-discovery-parts-1-4","n":"ISO/IEC 27050","j":"International (ISO/IEC)","v":0,"c":28,"m":4},{"s":"israel-protection-of-privacy-law-5741-1981","n":"Israel Protection of Privacy Law (5741-1981)","j":"Israel","v":1,"c":9,"m":4},{"s":"italy-personal-data-protection-code-legislative-decree-no-1962003-amended-2018","n":"Italy Personal Data Protection Code (Legislative Decree No. 196/2003, amended 2018)","j":"Italy","v":1,"c":8,"m":4},{"s":"itar-international-traffic-in-arms-regulations","n":"ITAR","j":"United States (State Department)","v":1,"c":8,"m":4},{"s":"itu-t-x805-security-architecture-for-end-to-end-communications","n":"ITU-T X.805","j":"International (ITU-T)","v":1,"c":13,"m":4},{"s":"maslach-burnout-inventory-mbi-and-areas-of-worklife-survey-aws-model","n":"Maslach Burnout Inventory (MBI) and Areas of Worklife Survey (AWS) Model","j":"United States (origin), International applicability","v":1,"c":8,"m":4},{"s":"naic-insurance-data-security-model-law-mdl-668","n":"NAIC Insurance Data Security Model Law (MDL-668)","j":"United States (NAIC)","v":1,"c":8,"m":4},{"s":"new-zealand-information-security-manual-nzism","n":"New Zealand Information Security Manual (NZISM)","j":"New Zealand (GCSB/NCSC)","v":1,"c":8,"m":4},{"s":"nigeria-open-banking-regulatory-framework-cbn-2023","n":"Nigeria Open Banking Regulatory Framework (CBN, 2023)","j":"Nigeria (CBN)","v":1,"c":8,"m":4},{"s":"nist-sp-800-115-technical-guide-to-information-security-testing-and-assessment","n":"NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment)","j":"United States","v":1,"c":8,"m":4},{"s":"nist-sp-800-146","n":"NIST SP 800-146","j":"United States","v":1,"c":8,"m":4},{"s":"nist-sp-800-37","n":"NIST SP 800-37","j":"United States","v":1,"c":8,"m":4},{"s":"nist-sp-800-66","n":"NIST SP 800-66","j":"United States","v":1,"c":8,"m":4},{"s":"nrf-cybersecurity-and-data-privacy-framework-national-retail-federation","n":"NRF Cybersecurity and Data Privacy Framework (National Retail Federation)","j":"United States (NRF)","v":1,"c":8,"m":4},{"s":"owasp-api-security-top-10-2023","n":"OWASP API Security Top 10","j":"International","v":1,"c":8,"m":4},{"s":"owasp-samm","n":"OWASP SAMM","j":"International","v":1,"c":5,"m":4},{"s":"pas-1192-52015-security-minded-approach-to-bim-and-digital-built-environments","n":"PAS 1192-5:2015","j":"United Kingdom (BSI/CPNI)","v":1,"c":6,"m":4},{"s":"pcaob-as-2201-audit-of-internal-control-over-financial-reporting-icfr","n":"PCAOB AS 2201","j":"United States (PCAOB)","v":1,"c":8,"m":4},{"s":"psd2-sca","n":"PSD2 SCA","j":"European Union","v":1,"c":6,"m":4},{"s":"ptes","n":"PTES","j":"International","v":1,"c":7,"m":4},{"s":"sasb-standards","n":"SASB Standards","j":"International","v":1,"c":6,"m":4},{"s":"sig-shared-assessments","n":"SIG (Shared Assessments)","j":"International","v":1,"c":8,"m":4},{"s":"taiwan-pdpa","n":"Taiwan PDPA","j":"Taiwan","v":1,"c":8,"m":4},{"s":"tanzania-personal-data-protection-act-draft","n":"Tanzania Personal Data Protection Act (Draft)","j":"Tanzania","v":1,"c":5,"m":4},{"s":"tennessee-information-protection-act-tipa","n":"Tennessee Information Protection Act (TIPA)","j":"United States \u2014 Tennessee","v":1,"c":7,"m":4},{"s":"uk-ai-regulation-framework","n":"UK AI Regulation Framework","j":"United Kingdom","v":1,"c":5,"m":4},{"s":"virginia-cdpa","n":"Virginia CDPA","j":"United States - Virginia","v":1,"c":6,"m":4},{"s":"cdp-formerly-carbon-disclosure-project","n":"CDP (formerly Carbon Disclosure Project)","j":"International","v":1,"c":13,"m":3},{"s":"czech-republic-act-on-the-protection-of-personal-data-act-no-1102019-coll","n":"Czech Republic Act on the Protection of Personal Data (Act No. 110/2019 Coll.)","j":"Czech Republic","v":1,"c":21,"m":3},{"s":"digital-economy-partnership-agreement-depa","n":"Digital Economy Partnership Agreement (DEPA)","j":"International - Parties: New Zealand, Singapore, Chile (signatories); South Korea (acceded 2023). Applicants: China, Canada (accession process ongoing).","v":1,"c":34,"m":3},{"s":"ear-export-administration-regulations","n":"EAR","j":"United States (Commerce/BIS)","v":1,"c":24,"m":3},{"s":"ecb-tiber-eu-framework","n":"ECB TIBER-EU Framework","j":"European Union (coordinated by ENISA, adopted by national authorities and the ECB)","v":1,"c":20,"m":3},{"s":"eu-chips-act-regulation-eu-20231781","n":"EU Chips Act (Regulation (EU) 2023/1781)","j":"European Union","v":1,"c":26,"m":3},{"s":"eu-digital-markets-act","n":"EU Digital Markets Act","j":"European Union","v":1,"c":26,"m":3},{"s":"eu-nis2-directive-transport-sector-requirements","n":"EU NIS2 Directive","j":"European Union","v":0,"c":11,"m":3},{"s":"first-csirt-services-framework-and-standards","n":"FIRST CSIRT Services Framework and Standards","j":"International (FIRST \u2014 107 countries)","v":1,"c":12,"m":3},{"s":"fisma","n":"FISMA","j":"United States","v":0,"c":12,"m":3},{"s":"full-range-leadership-model-bass-avolio","n":"Full Range Leadership Model (Bass & Avolio)","j":"International","v":0,"c":10,"m":3},{"s":"gli-33-gaming-laboratories-international-event-wagering-systems","n":"GLI-33","j":"International (Gaming)","v":0,"c":12,"m":3},{"s":"hkma-cyber-resilience-assessment-framework-c-raf","n":"HKMA Cyber Resilience Assessment Framework (C-RAF)","j":"Hong Kong","v":1,"c":11,"m":3},{"s":"hkma-spm","n":"HKMA SPM","j":"Hong Kong","v":0,"c":11,"m":3},{"s":"hl7-fhir-security-framework","n":"HL7 FHIR Security Framework","j":"International (Healthcare)","v":1,"c":7,"m":3},{"s":"ilo-nursing-personnel-convention-c149-1977","n":"ILO Nursing Personnel Convention C149 (1977)","j":"International","v":1,"c":8,"m":3},{"s":"iso-8000-data-quality","n":"ISO 8000","j":"International (ISO/TC 184)","v":0,"c":28,"m":3},{"s":"isoiec-23837-security-requirements-for-quantum-key-distribution","n":"ISO/IEC 23837","j":"International (ISO/IEC)","v":0,"c":36,"m":3},{"s":"isoiec-270142020","n":"ISO/IEC 27014:2020","j":"International","v":0,"c":35,"m":3},{"s":"issb-standards","n":"ISSB Standards","j":"International","v":1,"c":9,"m":3},{"s":"japan-fsa-cybersecurity-guidelines-for-financial-institutions","n":"Japan FSA Cybersecurity Guidelines for Financial Institutions","j":"Japan","v":1,"c":11,"m":3},{"s":"kids-online-safety-act-kosa","n":"Kids Online Safety Act (KOSA)","j":"United States","v":1,"c":8,"m":3},{"s":"modern-slavery-act-2018-australia","n":"Modern Slavery Act 2018 (Australia)","j":"Australia","v":1,"c":8,"m":3},{"s":"nabers-national-australian-built-environment-rating-system","n":"NABERS","j":"Australia","v":1,"c":8,"m":3},{"s":"nerc-cip","n":"NERC CIP","j":"North America","v":1,"c":8,"m":3},{"s":"nist-sp-800-39","n":"NIST SP 800-39","j":"United States","v":1,"c":8,"m":3},{"s":"nist-sp-800-63","n":"NIST SP 800-63 Digital Identity Guidelines","j":"United States","v":1,"c":8,"m":3},{"s":"notifiable-data-breaches-scheme-australia","n":"Notifiable Data Breaches Scheme (Australia)","j":"Australia","v":1,"c":8,"m":3},{"s":"ny-dfs-23-nycrr-500","n":"NY DFS 23 NYCRR 500","j":"United States","v":1,"c":23,"m":3},{"s":"occ-heightened-standards-12-cfr-part-30-appendix-d","n":"OCC Heightened Standards (12 CFR Part 30, Appendix D)","j":"United States (OCC)","v":1,"c":8,"m":3},{"s":"protective-security-policy-framework-pspf-release-2024","n":"Protective Security Policy Framework (PSPF) Release 2024","j":"Australia","v":1,"c":5,"m":3},{"s":"russia-federal-law-on-personal-data-152-fz","n":"Russia Federal Law on Personal Data (152-FZ)","j":"Russia","v":1,"c":8,"m":3},{"s":"sa80002014-social-accountability-standard","n":"SA8000:2014","j":"International (SAI)","v":1,"c":7,"m":3},{"s":"sqf-code-edition-9-safe-quality-food","n":"SQF Code Edition 9","j":"International (GFSI-benchmarked)","v":1,"c":5,"m":3},{"s":"texas-data-privacy-act","n":"Texas Data Privacy Act","j":"United States - Texas","v":1,"c":6,"m":3},{"s":"turkey-kvkk","n":"Turkey KVKK","j":"Turkey","v":1,"c":7,"m":3},{"s":"uk-fcapra-operational-resilience-framework","n":"UK FCA/PRA Operational Resilience Framework","j":"United Kingdom","v":1,"c":5,"m":3},{"s":"uk-gambling-commission-cyber-resilience-requirements","n":"UK Gambling Commission","j":"United Kingdom (Gambling Commission)","v":1,"c":5,"m":3},{"s":"uk-gdpr-uk-general-data-protection-regulation","n":"UK GDPR (UK General Data Protection Regulation)","j":"United Kingdom","v":1,"c":6,"m":3},{"s":"vietnam-pdpd","n":"Vietnam PDPD","j":"Vietnam","v":1,"c":6,"m":3},{"s":"australia-online-safety-act-2021","n":"Australia Online Safety Act 2021","j":"Australia (eSafety Commissioner)","v":1,"c":15,"m":2},{"s":"california-iot-security-law","n":"California IoT Security Law","j":"United States - California","v":1,"c":6,"m":2},{"s":"cobit-2019","n":"COBIT 2019","j":"International","v":0,"c":68,"m":2},{"s":"fatf-40-recommendations","n":"FATF 40 Recommendations","j":"International","v":0,"c":16,"m":2},{"s":"fatf-recommendation-16-virtual-asset-travel-rule","n":"FATF Recommendation 16","j":"International (FATF \u2014 40 members)","v":0,"c":13,"m":2},{"s":"fido2-webauthn-passwordless-authentication-standard","n":"FIDO2 / WebAuthn","j":"International (FIDO Alliance/W3C)","v":1,"c":16,"m":2},{"s":"global-cross-border-privacy-rules-global-cbpr-forum","n":"Global Cross-Border Privacy Rules (Global CBPR) Forum","j":"International (Global CBPR Forum)","v":1,"c":12,"m":2},{"s":"globalgap-integrated-farm-assurance-ifa-standard-v6","n":"GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6","j":"International (GLOBALG.A.P.)","v":0,"c":12,"m":2},{"s":"hersey-blanchard-situational-leadership-model","n":"Hersey & Blanchard Situational Leadership Model","j":"International","v":0,"c":11,"m":2},{"s":"hong-kong-personal-data-privacy-ordinance-pdpo-cap-486","n":"Hong Kong Personal Data (Privacy) Ordinance (PDPO, Cap 486)","j":"Hong Kong","v":1,"c":13,"m":2},{"s":"iata-operational-safety-audit-iosa-standards-manual","n":"IATA Operational Safety Audit (IOSA) Standards Manual","j":"International (IATA)","v":0,"c":9,"m":2},{"s":"icc-incoterms-2020-international-commercial-terms","n":"ICC Incoterms 2020","j":"International (ICC)","v":0,"c":8,"m":2},{"s":"icmm-mining-principles-2024-update","n":"ICMM Mining Principles (2024 Update)","j":"International (ICMM)","v":1,"c":8,"m":2},{"s":"ifrs-17-insurance-contracts","n":"IFRS 17","j":"International (IASB)","v":0,"c":8,"m":2},{"s":"india-account-aggregator-framework-rbi","n":"India Account Aggregator Framework (RBI)","j":"India (RBI)","v":1,"c":8,"m":2},{"s":"irm-enterprise-risk-management-framework-institute-of-risk-management","n":"IRM Enterprise Risk Management Framework (Institute of Risk Management)","j":"International (IRM)","v":1,"c":7,"m":2},{"s":"itu-radio-regulations-and-space-security-standards","n":"ITU Radio Regulations and Space Security Standards","j":"International (ITU \u2014 193 member states)","v":1,"c":8,"m":2},{"s":"jordan-draft-personal-data-protection-law-2022","n":"Jordan Draft Personal Data Protection Law (2022)","j":"Jordan","v":1,"c":8,"m":2},{"s":"kenya-dpa","n":"Kenya Data Protection Act","j":"Kenya","v":1,"c":8,"m":2},{"s":"laos-law-on-prevention-and-combating-cybercrime-2015","n":"Laos Law on Prevention and Combating Cybercrime (2015)","j":"Laos","v":1,"c":8,"m":2},{"s":"leed-v41-green-building-rating-system-us-green-building-council","n":"LEED v4.1","j":"International (USGBC \u2014 185 countries)","v":1,"c":8,"m":2},{"s":"lloyds-of-london-cyber-insurance-requirements-and-underwriting-standards","n":"Lloyd's of London Cyber Insurance Requirements and Underwriting Standards","j":"United Kingdom (Lloyd's of London)","v":1,"c":8,"m":2},{"s":"mifid-ii-mifir","n":"MiFID II / MiFIR","j":"European Union","v":1,"c":8,"m":2},{"s":"nato-cyber-defence-policy-and-nato-computer-incident-response-capability-ncirc","n":"NATO Cyber Defence Policy and NATO Computer Incident Response Capability (NCIRC)","j":"International (NATO \u2014 32 members)","v":1,"c":8,"m":2},{"s":"nato-stanag-4774-confidentiality-metadata-labels-and-stanag-4778-metadata-binding","n":"NATO STANAG 4774 (Confidentiality Metadata Labels) and STANAG 4778 (Metadata Binding)","j":"International (NATO)","v":1,"c":8,"m":2},{"s":"nist-ai-600-1-generative-ai-profile","n":"NIST AI 600-1: Generative AI Profile","j":"United States","v":1,"c":8,"m":2},{"s":"nist-sp-800-82-rev-3","n":"NIST SP 800-82 Rev 3","j":"United States","v":1,"c":48,"m":2},{"s":"nist-sp-800-88-rev-1","n":"NIST SP 800-88 Rev 1","j":"United States","v":1,"c":29,"m":2},{"s":"nrc-10-cfr-7354-nuclear-facility-cybersecurity","n":"NRC 10 CFR 73.54","j":"United States","v":1,"c":8,"m":2},{"s":"papua-new-guinea-national-cybersecurity-policy-cybercrime-act-2016","n":"Papua New Guinea National Cybersecurity Policy & Cybercrime Act (2016)","j":"Papua New Guinea","v":1,"c":6,"m":2},{"s":"rhode-island-data-transparency-and-privacy-protection-act-ridtppa","n":"Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)","j":"United States \u2014 Rhode Island","v":1,"c":7,"m":2},{"s":"south-korea-isms-p","n":"South Korea ISMS-P","j":"South Korea","v":1,"c":5,"m":2},{"s":"uk-age-appropriate-design-code-childrens-code","n":"UK Age Appropriate Design Code (Children's Code)","j":"United Kingdom","v":1,"c":5,"m":2},{"s":"uk-bribery-act-2010","n":"UK Bribery Act 2010","j":"United Kingdom (SFO)","v":1,"c":5,"m":2},{"s":"uk-defence-standard-05-138-cyber-security-for-defence-suppliers","n":"UK Defence Standard 05-138","j":"United Kingdom (MOD)","v":1,"c":5,"m":2},{"s":"us-childrens-online-privacy-protection-act-coppa-and-coppa-20-proposed-updates","n":"US Children's Online Privacy Protection Act (COPPA) and COPPA 2.0 Proposed Updates","j":"United States (FTC)","v":1,"c":6,"m":2},{"s":"6th-anti-money-laundering-directive-amld6-directive-eu-20181673-superseded-by-amld7","n":"6th Anti-Money Laundering Directive (AMLD6, Directive (EU) 2018/1673)","j":"European Union","v":1,"c":20,"m":1},{"s":"directive-eu-2023970-on-pay-transparency","n":"Directive (EU) 2023/970 on pay transparency","j":"European Union","v":1,"c":22,"m":1},{"s":"eu-markets-in-crypto-assets-regulation-mica","n":"EU Markets in Crypto-Assets Regulation (MiCA)","j":"European Union","v":1,"c":22,"m":1},{"s":"eu-seveso-iii-directive-directive-201218eu","n":"EU Seveso III Directive (Directive 2012/18/EU)","j":"European Union","v":1,"c":17,"m":1},{"s":"extractive-industries-transparency-initiative-eiti-standard-2023","n":"Extractive Industries Transparency Initiative (EITI) Standard (2023)","j":"International (EITI)","v":1,"c":15,"m":1},{"s":"fssc-22000-food-safety-system-certification","n":"FSSC 22000","j":"International (FSSC Foundation)","v":0,"c":11,"m":1},{"s":"georgia-law-on-personal-data-protection-2012","n":"Georgia Law on Personal Data Protection (2012)","j":"Georgia","v":1,"c":11,"m":1},{"s":"hungary-act-cxii-of-2011-on-informational-self-determination-and-freedom-of-information-info-act","n":"Hungary Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act)","j":"Hungary","v":1,"c":10,"m":1},{"s":"ilo-tripartite-declaration-of-principles-concerning-multinational-enterprises-mne-declaration","n":"ILO Tripartite Declaration of Principles concerning Multinational Enterprises (MNE Declaration)","j":"International (ILO)","v":1,"c":8,"m":1},{"s":"latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018","n":"Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018)","j":"Latvia","v":1,"c":8,"m":1},{"s":"law-on-personal-data-protection-official-gazette-no-422020","n":"Law on Personal Data Protection (Official Gazette No. 42/2020)","j":"North Macedonia","v":1,"c":8,"m":1},{"s":"lebanon-electronic-transactions-and-personal-data-protection-law-law-no-812018","n":"Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018)","j":"Lebanon","v":1,"c":8,"m":1},{"s":"myanmar-cybersecurity-law-2023","n":"Myanmar Cybersecurity Law (2023)","j":"Myanmar","v":1,"c":8,"m":1},{"s":"nist-sp-800-161-rev-1","n":"NIST SP 800-161 Rev 1","j":"United States","v":1,"c":42,"m":1},{"s":"ontario-accessibility-for-ontarians-with-disabilities-act-aoda-iasr-web-standard","n":"Ontario Accessibility for Ontarians with Disabilities Act (AODA)","j":"Canada (Ontario)","v":1,"c":8,"m":1},{"s":"paraguay-law-on-protection-of-personal-data-law-no-65342020","n":"Paraguay Law on Protection of Personal Data (Law No. 6534/2020)","j":"Paraguay","v":1,"c":8,"m":1},{"s":"philippines-cybercrime-prevention-act-ra-10175","n":"Philippines Cybercrime Prevention Act (RA 10175)","j":"Philippines","v":1,"c":6,"m":1},{"s":"privacy-and-other-legislation-amendment-act-2024-australia","n":"Privacy and Other Legislation Amendment Act 2024 (Australia)","j":"Australia","v":1,"c":8,"m":1},{"s":"science-based-targets-initiative-sbti-net-zero-standard","n":"Science Based Targets Initiative (SBTi)","j":"International (SBTi)","v":1,"c":6,"m":1},{"s":"sec-climate-disclosure-rule","n":"SEC Climate Disclosure Rule","j":"United States","v":1,"c":5,"m":1},{"s":"singapore-cybersecurity-act-2018","n":"Singapore Cybersecurity Act 2018","j":"Singapore","v":1,"c":5,"m":1},{"s":"uae-virtual-asset-regulatory-authority-vara-regulations","n":"UAE Virtual Asset Regulatory Authority (VARA) Regulations","j":"United Arab Emirates \u2014 Dubai","v":1,"c":5,"m":1},{"s":"uk-modern-slavery-act-2015","n":"UK Modern Slavery Act 2015","j":"United Kingdom","v":1,"c":5,"m":1},{"s":"us-nrc-10-cfr-7354-cyber-security-for-nuclear-power-plants","n":"US NRC 10 CFR 73.54","j":"United States (NRC)","v":1,"c":5,"m":1},{"s":"us-ofac-sanctions-compliance-framework","n":"US OFAC Sanctions Compliance Framework","j":"United States (Treasury/OFAC)","v":1,"c":5,"m":1},{"s":"wcag-22","n":"WCAG 2.2","j":"International","v":1,"c":5,"m":1},{"s":"cook-islands-electronic-transactions-act-2003","n":"Cook Islands Electronic Transactions Act 2003","j":"Cook Islands","v":0,"c":17,"m":0},{"s":"coso-enterprise-risk-management-erm-framework-2017","n":"COSO Enterprise Risk Management (ERM) Framework (2017)","j":"International (COSO)","v":0,"c":20,"m":0},{"s":"critical-raw-materials-act-proposed-regulation-com2023-192","n":"Critical Raw Materials Act (Proposed Regulation COM(2023) 192)","j":"European Union","v":1,"c":22,"m":0},{"s":"cyber-essentials-plus","n":"Cyber Essentials Plus","j":"United Kingdom","v":1,"c":20,"m":0},{"s":"ecss-e-st-40c-space-engineering-software","n":"ECSS-E-ST-40C: Space Engineering","j":"Europe (ECSS)","v":1,"c":10,"m":0},{"s":"ethical-trading-initiative-eti-base-code","n":"Ethical Trading Initiative (ETI) Base Code","j":"International (ETI \u2014 UK-based alliance)","v":1,"c":9,"m":0},{"s":"etsi-industry-specification-group-isg-on-quantum-key-distribution-qkd","n":"ETSI Industry Specification Group (ISG) on Quantum Key Distribution (QKD)","j":"International (European Telecommunications Standards Institute - ETSI)","v":0,"c":7,"m":0},{"s":"fiji-data-protection-bill-2020","n":"Fiji Data Protection Bill (2020)","j":"Fiji","v":0,"c":7,"m":0},{"s":"finland-data-protection-act-tietosuojalaki-10502018","n":"Finland Data Protection Act (Tietosuojalaki, 1050/2018)","j":"Finland","v":1,"c":11,"m":0},{"s":"ftc-health-breach-notification-rule","n":"FTC Health Breach Notification Rule","j":"United States","v":1,"c":11,"m":0},{"s":"ghana-data-protection-act-2012-act-843","n":"Ghana Data Protection Act 2012 (Act 843)","j":"Ghana","v":1,"c":12,"m":0},{"s":"greece-law-46242019-hellenic-data-protection-authority-hdpa-implementation-act","n":"Greece Law 4624/2019","j":"Greece","v":1,"c":12,"m":0},{"s":"hkma-tm-g-1","n":"HKMA TM-G-1","j":"Hong Kong","v":1,"c":8,"m":0},{"s":"irs-publication-1075","n":"IRS Publication 1075","j":"United States","v":1,"c":8,"m":0},{"s":"iso-304142018-human-resource-management-guidelines-for-internal-and-external-human-capital-reporting","n":"ISO 30414:2018","j":"International (ISO)","v":0,"c":56,"m":0},{"s":"japan-act-on-specified-commercial-transactions-asct-digital-services","n":"Japan Act on Specified Commercial Transactions (ASCT)","j":"Japan (CAA)","v":1,"c":8,"m":0},{"s":"kazakhstan-law-on-personal-data-and-their-protection-no-94-v","n":"Kazakhstan Law on Personal Data and Their Protection (No. 94-V)","j":"Kazakhstan","v":1,"c":8,"m":0},{"s":"kuwait-data-privacy-protection-regulation-kdppr-2021-cma-directive","n":"Kuwait Data Privacy Protection Regulation (KDPPR, 2021","j":"Kuwait","v":1,"c":8,"m":0},{"s":"kuwait-national-cybersecurity-framework","n":"Kuwait National Cybersecurity Framework","j":"Kuwait","v":1,"c":8,"m":0},{"s":"law-no-09-08-on-the-protection-of-individuals-with-regard-to-the-processing-of-personal-data","n":"Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data","j":"Morocco","v":1,"c":8,"m":0},{"s":"law-no-2013-450-of-19-june-2013-on-the-protection-of-personal-data","n":"Law No. 2013-450 of 19 June 2013 on the Protection of Personal Data","j":"C\u00f4te d'Ivoire","v":1,"c":8,"m":0},{"s":"lithuania-law-on-legal-protection-of-personal-data-2018","n":"Lithuania Law on Legal Protection of Personal Data (2018)","j":"Lithuania","v":1,"c":8,"m":0},{"s":"lloyds-minimum-standards-cyber-security","n":"Lloyd's Minimum Standards","j":"United Kingdom (Lloyd's)","v":1,"c":8,"m":0},{"s":"luxembourg-law-of-1-august-2018-on-data-protection-gdpr-implementation","n":"Luxembourg Law of 1 August 2018 on Data Protection (GDPR Implementation)","j":"Luxembourg","v":1,"c":8,"m":0},{"s":"malta-data-protection-act-cap-586-2018","n":"Malta Data Protection Act (Cap. 586, 2018)","j":"Malta","v":1,"c":8,"m":0},{"s":"montenegro-law-on-personal-data-protection-2023","n":"Montenegro Law on Personal Data Protection (2023)","j":"Montenegro","v":1,"c":8,"m":0},{"s":"netherlands-gdpr-implementation-act-uavg-uitvoeringswet-avg-2018","n":"Netherlands GDPR Implementation Act (UAVG","j":"Netherlands","v":1,"c":8,"m":0},{"s":"oman-personal-data-protection-law-royal-decree-62022","n":"Oman Personal Data Protection Law (Royal Decree 6/2022)","j":"Oman","v":1,"c":8,"m":0},{"s":"panama-law-on-personal-data-protection-law-no-81-of-2019","n":"Panama Law on Personal Data Protection (Law No. 81 of 2019)","j":"Panama","v":1,"c":8,"m":0},{"s":"philippines-dpa","n":"Philippines Data Privacy Act","j":"Philippines","v":1,"c":8,"m":0},{"s":"poland-act-on-personal-data-protection-ustawa-o-ochronie-danych-osobowych-2018","n":"Poland Act on Personal Data Protection (Ustawa o ochronie danych osobowych, 2018)","j":"Poland","v":1,"c":8,"m":0},{"s":"portugal-law-no-582019-data-protection-implementation-act","n":"Portugal Law No. 58/2019","j":"Portugal","v":1,"c":8,"m":0},{"s":"privacy-by-design-pbd-seven-foundational-principles","n":"Privacy by Design (PbD)","j":"International","v":1,"c":7,"m":0},{"s":"proposal-for-a-directive-on-improving-working-conditions-in-platform-work-com2023-491","n":"Proposal for a Directive on improving working conditions in platform work (COM(2023) 491)","j":"European Union","v":1,"c":6,"m":0},{"s":"proptech-security-standards-smart-building-cybersecurity","n":"PropTech Security Standards","j":"International","v":1,"c":5,"m":0},{"s":"protection-of-privacy-law-1981","n":"Protection of Privacy Law (1981)","j":"Israel","v":1,"c":5,"m":0},{"s":"rbi-cybersecurity-framework-for-banks","n":"RBI Cybersecurity Framework for Banks","j":"India","v":1,"c":8,"m":0},{"s":"romania-law-no-1902018-on-data-protection-measures-gdpr-implementation","n":"Romania Law No. 190/2018 on Data Protection Measures (GDPR Implementation)","j":"Romania","v":1,"c":8,"m":0},{"s":"rwanda-dpl","n":"Rwanda DPL","j":"Rwanda","v":1,"c":8,"m":0},{"s":"saudi-arabia-pdpl","n":"Saudi Arabia PDPL","j":"Saudi Arabia","v":1,"c":8,"m":0},{"s":"saudi-nca-ecc","n":"Saudi NCA ECC","j":"Saudi Arabia","v":1,"c":5,"m":0},{"s":"security-of-critical-infrastructure-act-2018-soci","n":"Security of Critical Infrastructure Act 2018 (SOCI)","j":"Australia","v":1,"c":5,"m":0},{"s":"senegal-law-on-personal-data-protection-law-no-2008-12","n":"Senegal Law on Personal Data Protection (Law No. 2008-12)","j":"Senegal","v":1,"c":6,"m":0},{"s":"senge-fifth-discipline-learning-organization","n":"Senge Fifth Discipline","j":"International","v":1,"c":5,"m":0},{"s":"serbia-law-on-personal-data-protection-2018","n":"Serbia Law on Personal Data Protection (2018)","j":"Serbia","v":1,"c":5,"m":0},{"s":"singapore-ai-governance-framework","n":"Singapore AI Governance Framework","j":"Singapore","v":1,"c":5,"m":0},{"s":"singapore-government-instruction-manual-on-ictss-management-im8","n":"Singapore Government Instruction Manual on ICT&SS Management (IM8)","j":"Singapore (GovTech)","v":1,"c":5,"m":0},{"s":"mas-trm","n":"Singapore MAS TRM Guidelines","j":"Singapore","v":1,"c":6,"m":0},{"s":"singapore-payment-services-act-psa-digital-payment-token-regulation","n":"Singapore Payment Services Act (PSA)","j":"Singapore (MAS)","v":1,"c":5,"m":0},{"s":"soc-for-cybersecurity-cybersecurity-risk-management-examination","n":"SOC for Cybersecurity","j":"United States (AICPA)","v":1,"c":6,"m":0},{"s":"south-korea-credit-information-act","n":"South Korea Credit Information Act","j":"South Korea","v":1,"c":5,"m":0},{"s":"sox-404","n":"SOX 404 / ICFR","j":"United States","v":1,"c":5,"m":0},{"s":"spain-ens","n":"Spain ENS","j":"Spain","v":1,"c":5,"m":0},{"s":"sri-lanka-personal-data-protection-act-no-9-of-2022","n":"Sri Lanka Personal Data Protection Act (No. 9 of 2022)","j":"Sri Lanka","v":1,"c":5,"m":0},{"s":"switzerland-new-federal-act-on-data-protection-nfadpndsg-2023","n":"Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)","j":"Switzerland","v":1,"c":8,"m":0},{"s":"the-leadership-challenge-kouzes-posner","n":"The Leadership Challenge (Kouzes & Posner)","j":"International","v":1,"c":5,"m":0},{"s":"uk-building-safety-act-2022","n":"UK Building Safety Act 2022","j":"United Kingdom (England)","v":1,"c":5,"m":0},{"s":"uk-cyber-essentials","n":"UK Cyber Essentials","j":"United Kingdom","v":1,"c":42,"m":0},{"s":"uk-data-protection-act-2018","n":"UK Data Protection Act 2018","j":"United Kingdom","v":1,"c":5,"m":0},{"s":"uk-online-safety-act-2023","n":"UK Online Safety Act 2023","j":"United Kingdom (Ofcom)","v":1,"c":5,"m":0},{"s":"us-executive-order-14028-improving-the-nations-cybersecurity","n":"US Executive Order 14028","j":"United States","v":1,"c":5,"m":0},{"s":"us-foreign-corrupt-practices-act-fcpa","n":"US Foreign Corrupt Practices Act (FCPA)","j":"United States (Federal \u2014 DOJ/SEC)","v":1,"c":5,"m":0},{"s":"us-itar-and-ear-export-control-and-data-security","n":"US ITAR and EAR","j":"United States (State Dept/BIS)","v":1,"c":5,"m":0},{"s":"us-sec-digital-assets-and-crypto-regulatory-framework","n":"US SEC Digital Assets and Crypto Regulatory Framework","j":"United States (SEC)","v":1,"c":5,"m":0},{"s":"utah-consumer-privacy-act","n":"Utah Consumer Privacy Act","j":"United States - Utah","v":1,"c":5,"m":0},{"s":"washington-my-health-my-data-act-mhmd","n":"Washington My Health My Data Act (MHMD)","j":"United States \u2014 Washington","v":1,"c":6,"m":0},{"s":"wco-authorised-economic-operator-aeo-framework","n":"WCO Authorised Economic Operator (AEO) Framework","j":"International (WCO)","v":1,"c":5,"m":0},{"s":"zambia-data-protection-act-2021","n":"Zambia Data Protection Act (2021)","j":"Zambia","v":1,"c":5,"m":0},{"s":"zimbabwe-data-protection-act-2021","n":"Zimbabwe Data Protection Act (2021)","j":"Zimbabwe","v":1,"c":5,"m":0}],"totals":{"frameworks":608,"controls":17218,"with_mappings":539}}