The U.S. Health Insurance Portability and Accountability Act (HIPAA) protects the confidentiality and security of health information. While the Privacy Rule governs the use and disclosure of protected health...
The General Data Protection Regulation (GDPR) is Europe’s comprehensive privacy law that has influenced data protection regulations worldwide. At its core are seven principles outlined in Article 5: lawfulness, fairness...
The Payment Card Industry Data Security Standard (PCI DSS) is mandatory for organisations that process, store, or transmit cardholder data. Version 4.0, released in 2024 with updates through 2025, introduces new...
Service Organisation Control (SOC) 2 is a widely adopted auditing standard for service providers that handle customer data. It evaluates whether an organisation’s controls align with five Trust Services Criteria:...
ISO/IEC 27001 is an international standard that specifies requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS). While not mandatory for every organisation, it demonstrates...
The NIST Cybersecurity Framework (CSF) provides a flexible approach for organisations to manage cybersecurity risk. The latest version (2.0) groups activities into six functions: Govern, Identify, Protect, Detect, Respond,...
