U.S. Federal Security Frameworks
U.S. Federal government security frameworks including NIST, FedRAMP, and DoD requirements. 8663 controls across 36 frameworks.
NIST SP 800-53
Security and Privacy Controls for Information Systems and Organizations
FedRAMP Rev 5
Federal Risk and Authorization Management Program Security Baselines
FedRAMP 20x KSI
Key Security Indicators for FedRAMP 20x authorization
DoD SRG
DoD Cloud Computing Security Requirements Guide - FedRAMP+ controls by Impact Level
Kubernetes STIG
DoD Security Technical Implementation Guide for Kubernetes container orchestration
NIST AI RMF
AI Risk Management Framework Playbook - Suggested actions for trustworthy AI
ITSG-33
IT Security Risk Management - Canadian Government Security Control Catalogue
NIST SSDF
Secure Software Development Framework - Practices for integrating security into SDLC
NIST SP 800-171
Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
CMMC
Cybersecurity Maturity Model Certification for DoD contractors
GovRAMP
Government Risk and Authorization Management Program - Security Baselines for State and Local Government Cloud Services
NIST SP 800-171 Rev 3
CUI Protection Requirements Rev 3
NIST SP 800-171A Rev 3
Assessing CUI Security Rev 3
NIST SP 800-171A
Assessing CUI Security Requirements
NIST SP 800-207 Zero Trust
Zero Trust Architecture
NIST SP 800-218 SSDF
Secure Software Development Framework
NIST AI 600-1
Artificial Intelligence Risk Management
45 CFR 155.260
CMS Privacy and Security Standards
FBI CJIS
Criminal Justice Information Services Security Policy
US Data Privacy Framework
US-EU Data Privacy Framework
CISA CPG
Cross-Sector Cybersecurity Performance Goals
CISA SSDAF
Secure Software Development Attestation Form
CMMC 2.0 Level 1
Cybersecurity Maturity Model Certification Level 1
CMMC 2.0 Level 1 AOS
CMMC Level 1 Assessment Objectives
DoD Zero Trust Roadmap
DoD Zero Trust Strategy Roadmap
DoD ZTA Reference Architecture
DoD Zero Trust Reference Architecture
Executive Order 14028
Improving the Nations Cybersecurity
FCA CRM
Farm Credit Administration Cyber Risk Management
GLBA (16 CFR 314)
Gramm-Leach-Bliley Act Safeguards Rule
HIPAA Simplification 2013
HIPAA Administrative Simplification
NERC CIP
Critical Infrastructure Protection Standards
SEC Cybersecurity Rule
SEC Cybersecurity Risk Management Rule