How Old Is Your Cybersecurity Documentation?

When you look at your company’s existing documentation, is it old enough to:

• Attend kindergarten?
• Drive a car?
• Vote?
• Buy alcohol?

You can download this image from: https://complianceforge.com/content/pdf/cybersecurity-documentation-lifecycle.pdf

Cybersecurity Documentation Has A Lifecycle

For companies that have been around for decades that lack strong governance practices, it is possible some of its core cybersecurity documentation is stagnant.

When you compare the past 10 years with the previous 10 years, the volume of change in cybersecurity-related laws, regulations and frameworks is staggering. Depending on the industry, this means businesses are not just reviewing but entirely revamping policies, standards and procedures every few years to keep current with the changes.

Several ComplianceForge products include subscriptions, to address frequent updates:

• Digital Security Program (DSP);
• NIST 800-171 Compliance Program (NCP).

How Do I Keep Cybersecurity Documentation Current?

If you need to find a reputable partner for cybersecurity documentation, do yourself a favor and evaluate ComplianceForge since we specialize in cybersecurity documentation. It is what we do, so we research new requirements and do the dirty word of writing the documentation for our clients. We’ve been doing this since 2005, so we have over 2 decades of successfully supporting our clients’ needs for affordable, quality cybersecurity documentation.

Timeline Of Cybersecurity Laws, Regulations & Frameworks

You can see the past decade has ramped up new laws, regulations and frameworks, making it very difficult for companies to stay current:

2025

• Texas SB 2610

2024

• NIST SP 800-171 R3
• NIST CSF 2.0
• CIS CSC v8.1

2023

• EU NIS 2
• CMMC 2.0
• SEC Cybersecurity Rule
• CA CPRA
• NY DFS NYCRR 500 Amd 1 & 2

2022

• NIST SP 800-161 R1
• ISO 27001/27002:2022
• EU DORA
• PCI DSS 4.0

2020

• NIST SP 800-53 R5
• NIST SP 800-171 R2

2018

• NIST CSF 1.1
• Secure Controls Framework (SCF)
• CIS CSC v7
• CA CCPA
• COBIT 2019

2017

• NY DFS NYCRR 500

2016

• NIST SP 800-171 R1
• EU GDPR

2015

• NIST SP 800-53 R4
• NIST SP 800-171 R0
• NIST SP 800-161 R0
• CIS CSC v6

2014

• NIST CSF
• PCI DSS 3.0

2013

• ISO 27001/27002:2013

2010

• PCI DSS 2.0

2009

• NIST SP 800-53 R3
• HITECH (HIPAA update)

2008

• SANS TOP 20

2007

• NIST SP 800-53 R2

2006

• NIST SP 800-53 R1

2005

• NIST SP 800-53 R0
• ISO 27001/27002:2005 (rebranded from ISO 17799)

2004

• PCI DSS 1.0