��������Ƶ

Sarbanes-Oxley Act (SOX): Federal law establishing corporate governance and financial risk management requirements for public companies, including internal control assessments and financial reporting standards

Dodd-Frank Wall Street Reform: Comprehensive federal law addressing financial regulation, systemic risk management, and consumer protection in the financial sector

FedRAMP: Federal Risk and Authorization Management Program providing standardized security assessment for cloud services used by government agencies

COSO ERM Framework: Enterprise Risk Management Framework providing comprehensive guidance for organizations to evaluate and enhance their enterprise risk management

HIPAA: Health Insurance Portability and Accountability Act governing healthcare data privacy and security requirements

Gramm-Leach-Bliley Act: Federal law requiring financial institutions to explain their information-sharing practices and protect sensitive customer data

FISMA: Federal Information Security Management Act establishing information security standards for federal agencies and their contractors

State Risk Management Laws: Various state-specific requirements governing risk management practices and insurance regulations

ISO 31000: International standard providing principles and guidelines for effective risk management practices

NIST Risk Management Framework: Comprehensive framework for managing organizational risk in information systems and cybersecurity

SEC Requirements: Securities and Exchange Commission regulations governing risk disclosure and management for public companies

FTC Regulations: Federal Trade Commission rules affecting business practices, consumer protection, and risk management obligations