CISA: Cybersecurity Information Sharing Act - Federal law that promotes sharing of cyber threat information between private sector and government
FISMA: Federal Information Security Management Act - Defines framework for protecting government information, operations and assets against threats
GLBA: Gramm-Leach-Bliley Act - Requires financial institutions to explain their information-sharing practices and protect sensitive data
HIPAA: Health Insurance Portability and Accountability Act - Sets standards for protecting sensitive patient health information
SOX: Sarbanes-Oxley Act - Requires public companies to establish internal controls and procedures for financial reporting, including IT systems
FTC Act Section 5: Federal Trade Commission Act Section 5 - Prohibits unfair or deceptive practices affecting commerce, including inadequate cybersecurity measures
State Data Breach Laws: All 50 states have laws requiring notification of security breaches involving personal information
CCPA/CPRA: California Consumer Privacy Act/California Privacy Rights Act - Comprehensive state privacy laws giving California residents control over their personal information
NY SHIELD Act: New York Stop Hacks and Improve Electronic Data Security Act - Requires businesses to implement safeguards for private information of NY residents
VCDPA: Virginia Consumer Data Protection Act - Provides Virginia residents rights regarding their personal data and imposes obligations on businesses
CPA: Colorado Privacy Act - Provides Colorado residents with privacy rights and requires businesses to protect personal data
NIST CSF: NIST Cybersecurity Framework - Voluntary guidance for private sector organizations to better manage and reduce cybersecurity risk
ISO 27001: International standard for information security management systems (ISMS)
PCI DSS: Payment Card Industry Data Security Standard - Security standards for organizations that handle credit card information
SEC Requirements: Securities and Exchange Commission cybersecurity disclosure requirements for public companies
