Cybersecurity
Protecting systems and data through governance, technical controls, monitoring and incident response, as required by law, regulators and standards.
Overview
Cybersecurity compliance extends across industries. Common frameworks include NIST CSF, the NIST 800 series, CIS Controls, ISO 27001, PCI DSS and SOC 2, and regulations such as NYDFS Part 500 and DORA.
Primary concerns include data protection, incident response, business continuity, vendor risk management and secure development.
It connects most directly to NIST Cybersecurity Framework, ISO/IEC 27001, NYDFS Part 500, DORA and Incident reporting.
Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.
Why it matters
Cyber incidents are now regulatory events with strict reporting clocks.
Who it affects
Every organisation, especially financial services, healthcare and critical infrastructure.
Where it sits
Ten linked steps connect where you operate to the proof that you complied.
- 01Jurisdiction
- 02Industry
- 03Activity
- 04Authority
- 05Regulation
- 06Requirement
- 07Guidance
- 08Control
- 09Evidence
- 10Enforcement
Connections
The terms most closely tied to Cybersecurity. Select one to open it.
What to do about it
- 1List the laws and authorities in this area that apply to you.
- 2Map each obligation to a control and owner.
- 3Monitor change and enforcement in the area.
- 4Report coverage and gaps to management.
From requirement to evidence.
The standards crosswalk lets one tested security control satisfy several frameworks and regulations.
Request early access →