Protecting individuals who disclose violations or misconduct within governmental agencies

Accuracy, fairness, and privacy of consumer information in the files of credit reporting agencies

Ensuring compliance with cybersecurity standards among Department of Defense contractors

Collection limitation, data quality, purpose specification, use limitation, security safeguards, openness, individual participation, and accountability

To protect the privacy and personal data of EU citizens

IT management and governance framework focusing on aligning IT with business goals

Securing industrial control systems against cyber threats

Controlling the export of defense-related technologies and services

Enhancing risk management and capital adequacy in the banking sector

Protecting free speech rights and ensuring policies do not unlawfully restrict expression

Protecting the privacy of student educational records

Categorizing information systems based on security requirements

Providing a management system framework for business continuity planning and resilience in the face of disruptions

Strengthening regulation, supervision, and risk management in the banking sector

Detecting, preventing, and mitigating identity theft within organizations handling consumer data

Enforcing regulations and reporting standards for public companies concerning cybersecurity risks and events

Standards for securing bulk electric system cybersecurity in North America

Standardizing security assessments for cloud solutions used by federal agencies

Expanding HIPAA rules to include stricter breach notification requirements

Ensuring organizations achieve objectives with risk management, reliable reporting, and compliance

Investigating unfair practices and breaches involving consumer data

Minimum security requirements for federal information systems

Facilitating cyber threat information-sharing between government and private sectors

Public access to records from U.S. federal agencies

To provide a framework for establishing, implementing, and maintaining information security management systems (ISMS)

A mechanism for transatlantic data transfers aligning GDPR principles with U.S. practices

Enhancing maritime security and protecting U.S. ports from terrorism and other threats

Ensuring reliable electronic records and transparency in financial reporting

Ensuring uniformity in the handling and safeguarding of Controlled Unclassified Information

Integrating governance with enterprise objectives and strategies

The Payment Card Industry Security Standards Council (PCI SSC)

Principles and guidelines for risk management across organizations

Legal access to data stored by U.S.-based providers on foreign servers under certain conditions

Regulating the collection and use of personal information from children under 13 on websites and online services

Protecting consumer financial information and ensuring institutions explain their information-sharing practices

Implementing GDPR principles within the UK legislative framework

Security standards for cryptographic modules and their implementation within IT systems

Corporate financial practices and reporting

California Consumer Privacy Act

The confidentiality, integrity, and availability of healthcare information

The collection, maintenance, and dissemination of personal information by federal agencies

A cybersecurity framework providing a catalog of security and privacy controls

Personally Identifiable Information

Users should only have the permissions necessary for their job functions

To ensure federal agencies implement proper information security controls

Providing privacy-specific implementation guidelines for managing Personally Identifiable Information (PII)

Enhancing surveillance and intelligence mechanisms to prevent terrorism

The Risk Management Framework (RMF) for information system security and integration into system lifecycle

IT governance focused on effective, efficient, and acceptable use of IT in organizations

Developing and promoting cybersecurity frameworks and standards