US Federal Data Protection / Cybersecurity Laws

There is quite an assortment of statutory and regulatory requirements within the United States. However, there is no single cybersecurity law that governs all aspects of cybersecurity and privacy.

PCI DSS	US Federal Laws	US State Laws	EU GDPR	International Laws
Payment Card Industry Data Security Standard (PCI DSS) Version 3.1	HIPAA FACTA GLBA SOX	CA SB1386  MA 200CMR17.00 OR 646.200 & Others	EU GDPR	UK Data Protection Act & Others

 

When Addressing Compliance With US Federal Legal Requirements, Remember That NIST 800-53 is king!

We were the industry's first source for a customized, on-demand Cybersecurity & Data Protection Program (CDPP) that is specifically tailored for small and medium sized business. Our NIST 800-53 rev Cybersecurity & Data Protection Program (CDPP) follows industry-recognized best practices (e.g. NIST, ISO and CIS) and we reference applicable laws, requirements, standards, and best practices that businesses need to follow to be considered compliant.

We take the hassle of the guesswork away from US Federal Laws so you can focus on what you do best - growing your business. 

As information security professionals, we know the policies you need to have in place to meet the requirements with NIST 800-53 rev 5. The likelihood that your local “IT guy” knows these compliance requirements is unlikely since information security is a very specific skill set.

We follow proven, internationally recognized standards for what security policies should consist of. Many competitor sites unfortunately offer solutions that will leave you exposed and unprepared - when keeping your company in business and protected is the priority, there is no room for amateur solutions. The NIST-based Cybersecurity & Data Protection Program (CDPP) stands out from the competition in its coverage, depth, and price. Additionally, the turnaround for a NIST 800-53 Cybersecurity & Data Protection Program (CDPP) is generally 1-2 business days.

• Efficient CMMC Scoping

  Determining the scope of controls (e.g., assessment boundary) is different than determining control...

• Are you a cyber criminal?

  As a Chief Information Security Officer (CISO) or cybersecurity director, it is likely that you been...

• New Standard For Third-Party Cybersecurity Assessments

  The release of the Cybersecurity & Data Protection Assessment Standards (CDPAS) is important to the...

• Cybersecurity Materiality & Key Controls

  There is a "materiality ecosystem" that exists within modern cybersecurity risk management discussio...

---