Computer Fraud and Abuse Act (CFAA): Federal law that addresses unauthorized access to computer systems and defines computer crimes and associated penalties
Federal Information Security Management Act (FISMA): Sets comprehensive security standards for federal information systems and provides framework for protecting government data
Health Insurance Portability and Accountability Act (HIPAA): Regulates the security and privacy of healthcare data, including specific Security Rule requirements for electronic protected health information
Gramm-Leach-Bliley Act (GLBA): Federal law focusing on requirements for protecting consumer financial information and privacy in the financial sector
Sarbanes-Oxley Act (SOX): Legislation for publicly traded companies establishing requirements for internal controls and financial reporting security
NIST Cybersecurity Framework: Voluntary framework of computer security guidance for organizations to better manage and reduce cybersecurity risk
ISO 27001: International standard providing requirements for information security management systems (ISMS)
CIS Controls: Set of prioritized actions to protect organizations and data from known cyber attack vectors
PCI DSS: Payment Card Industry Data Security Standard - security standards for organizations handling credit card data
State Data Breach Notification Laws: State-specific requirements for reporting and handling data breaches affecting residents
State Privacy Laws: Various state-specific privacy regulations such as CCPA (California) and SHIELD Act (New York) governing data protection
Employment Privacy Laws: Federal and state regulations governing employee monitoring, privacy rights, and data protection in the workplace
