{"object":"list","schema_version":"1","count":92,"registry_hash":"46a33ee505eeda2d","release":"registry.fly.io/isms-api-prod:deployment-01KZHQTBPGJNFC29N1MDC18BDD","data":[{"id":"ISO_27001","name":"ISO/IEC 27001:2022","region":"International","version":"2022","deprecated":false,"replacement_id":null},{"id":"ISO_42001","name":"ISO/IEC 42001:2023","region":"International","version":"2023","deprecated":false,"replacement_id":null},{"id":"ISO_27701","name":"ISO/IEC 27701:2025","region":"International","version":"2025","deprecated":false,"replacement_id":null},{"id":"SOC_2","name":"SOC 2","region":"US","version":"2017 TSC","deprecated":false,"replacement_id":null},{"id":"HIPAA","name":"HIPAA","region":"US","version":"2013 Omnibus Final Rule","deprecated":false,"replacement_id":null},{"id":"GDPR","name":"GDPR","region":"EU","version":"2016/679","deprecated":false,"replacement_id":null},{"id":"CCPA","name":"CCPA","region":"US","version":"CCPA (2018) as amended by CPRA (operative 2023-01-01), AB 1008 and SB 1223 (operative 2025-01-01); CPPA ADMT/cyber-audit/risk-assessment/insurance regulations effective 2026-01-01","deprecated":false,"replacement_id":null},{"id":"NIST_CSF","name":"NIST Cybersecurity Framework 2.0","region":"US","version":"2.0 — NIST CSWP 29, February 26, 2024","deprecated":false,"replacement_id":null},{"id":"NIST_800_171","name":"NIST SP 800-171 Rev. 2","region":"US","version":"Rev. 2 — February 2020 (with Update 1, January 28, 2021)","deprecated":false,"replacement_id":null},{"id":"NIST_800_171_R3","name":"NIST SP 800-171 Rev. 3","region":"US","version":"Rev. 3 — May 14, 2024","deprecated":false,"replacement_id":null},{"id":"NIST_800_53","name":"NIST SP 800-53","region":"US","version":"Rev. 5, Release 5.2.0 (August 2025)","deprecated":false,"replacement_id":null},{"id":"NIS_2","name":"NIS 2","region":"EU","version":"Directive (EU) 2022/2555","deprecated":false,"replacement_id":null},{"id":"NIS_2_DE","name":"BSIG (Germany NIS 2 transposition)","region":"Germany","version":"BGBl. 2025 I Nr. 301 (zuletzt geändert Art. 4 G. v. 11.03.2026, BGBl. 2026 I Nr. 66)","deprecated":false,"replacement_id":null},{"id":"DORA","name":"DORA","region":"EU","version":"Regulation (EU) 2022/2554","deprecated":false,"replacement_id":null},{"id":"TISAX","name":"TISAX (VDA ISA 6.0.3)","region":"EU","version":"VDA ISA 6.0.3","deprecated":false,"replacement_id":null},{"id":"HDS","name":"HDS v2.0","region":"France","version":"v2.0","deprecated":false,"replacement_id":null},{"id":"ENS","name":"ENS (Esquema Nacional de Seguridad)","region":"Spain","version":"RD 311/2022 (mod. RD 1125/2024)","deprecated":false,"replacement_id":null},{"id":"ISO_9001","name":"ISO 9001:2015","region":"International","version":"2015","deprecated":false,"replacement_id":null},{"id":"ISO_22301","name":"ISO 22301:2019","region":"International","version":"2019","deprecated":false,"replacement_id":null},{"id":"EU_AI_ACT","name":"EU AI Act (Regulation (EU) 2024/1689)","region":"EU","version":"2024/1689","deprecated":false,"replacement_id":null},{"id":"UK_GDPR","name":"UK GDPR","region":"UK","version":"Retained EU 2016/679, amended by DUA 2025","deprecated":false,"replacement_id":null},{"id":"UK_DPA_2018","name":"UK Data Protection Act 2018","region":"UK","version":"2018 c.12, amended by DUA 2025","deprecated":false,"replacement_id":null},{"id":"UK_DUA_2025","name":"Data (Use and Access) Act 2025","region":"UK","version":"2025 c.18","deprecated":false,"replacement_id":null},{"id":"AU_ESSENTIAL_EIGHT","name":"Essential Eight Maturity Model (November 2023)","region":"Australia","version":"November 2023","deprecated":false,"replacement_id":null},{"id":"NIS_2_BE","name":"Loi NIS 2 du 26 avril 2024 / Wet NIS 2 van 26 april 2024 (Belgium)","region":"Belgium","version":"MB/BS 2024-05-17, NUMAC 2024202344","deprecated":false,"replacement_id":null},{"id":"NIS_2_IT","name":"D.Lgs. 138/2024 (Italy NIS 2 transposition)","region":"Italy","version":"D.Lgs. 4 settembre 2024, n. 138","deprecated":false,"replacement_id":null},{"id":"NIS_2_CZ","name":"Zákon č. 264/2025 Sb. (Czechia NIS 2 transposition)","region":"Czechia","version":"Zákon č. 264/2025 Sb.","deprecated":false,"replacement_id":null},{"id":"NIS_2_SK","name":"Zákon č. 69/2018 Z. z. (Slovakia NIS 2 transposition)","region":"Slovakia","version":"Zákon č. 69/2018 Z. z. v znení 366/2024 Z. z.","deprecated":false,"replacement_id":null},{"id":"NIS_2_PT","name":"Decreto-Lei n.º 125/2025 (Portugal NIS 2 transposition — RJC)","region":"Portugal","version":"DL 125/2025, DR I 234/2025-12-04","deprecated":false,"replacement_id":null},{"id":"NIS_2_GR","name":"Νόμος 5160/2024 (Greece NIS 2 transposition)","region":"Greece","version":"Ν. 5160/2024, ΦΕΚ Α' 195/27.11.2024","deprecated":false,"replacement_id":null},{"id":"NIS_2_LT","name":"Kibernetinio saugumo įstatymas Nr. XII-1428 (Lithuania NIS 2 transposition)","region":"Lithuania","version":"Nr. XII-1428 v redakcijos Nr. XIV-2902","deprecated":false,"replacement_id":null},{"id":"NIS_2_LV","name":"Nacionālās kiberdrošības likums (Latvia NIS 2 transposition)","region":"Latvia","version":"Nacionālās kiberdrošības likums (2024)","deprecated":false,"replacement_id":null},{"id":"NIS_2_EE","name":"Küberturvalisuse seadus (Estonia NIS 2 transposition)","region":"Estonia","version":"KüTS muudatus 2025 (RT I, 30.12.2025, 4)","deprecated":false,"replacement_id":null},{"id":"NIS_2_HU","name":"2024. évi LXIX. törvény (Hungary NIS 2 transposition)","region":"Hungary","version":"2024. évi LXIX. törvény + 418/2024 Korm. rend.","deprecated":false,"replacement_id":null},{"id":"NIS_2_RO","name":"OUG 155/2024 + Legea 124/2025 (Romania NIS 2 transposition)","region":"Romania","version":"OUG 155/2024 (cu modificările prin Legea 124/2025)","deprecated":false,"replacement_id":null},{"id":"NIS_2_BG","name":"Закон за киберсигурност (Bulgaria NIS 2 transposition)","region":"Bulgaria","version":"ЗКС в редакцията на ДВ бр. 17/2026","deprecated":false,"replacement_id":null},{"id":"IE_DPA_2018","name":"Ireland Data Protection Act 2018 (Number 7 of 2018)","region":"Ireland","version":"Number 7 of 2018, in force 2018-05-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_IE","name":"Ireland NIS 2 transposition (National Cyber Security Bill 2024 — pre-enactment)","region":"Ireland","version":"General Scheme 2024-08-30 (Bill not yet enacted as of 2026-05-10)","deprecated":false,"replacement_id":null},{"id":"NIS_2_FI","name":"Kyberturvallisuuslaki 124/2025 (Finland NIS 2 transposition)","region":"Finland","version":"Kyberturvallisuuslaki 4.4.2025/124","deprecated":false,"replacement_id":null},{"id":"NIS_2_DK","name":"NIS 2-loven (Lov nr. 434 af 6. maj 2025) (Denmark NIS 2 transposition)","region":"Denmark","version":"LOV nr. 434 af 06/05/2025","deprecated":false,"replacement_id":null},{"id":"NIS_2_SE","name":"Cybersäkerhetslag (2025:1506) (Sweden NIS 2 transposition)","region":"Sweden","version":"SFS 2025:1506","deprecated":false,"replacement_id":null},{"id":"NIS_2_SI","name":"Zakon o informacijski varnosti (ZInfV-1) (Slovenia NIS 2 transposition)","region":"Slovenia","version":"ZInfV-1, Uradni list RS 40/2025","deprecated":false,"replacement_id":null},{"id":"NIS_2_HR","name":"Zakon o kibernetičkoj sigurnosti (Croatia NIS 2 transposition)","region":"Croatia","version":"NN 14/2024 + Uredba NN 135/2024","deprecated":false,"replacement_id":null},{"id":"NIS_2_MT","name":"S.L. 460.41 (Malta NIS 2 transposition — LN 71/2025 as amended by LN 89/2026)","region":"Malta","version":"S.L. 460.41 (Cap. 460); LN 71/2025; amending LN 89/2026","deprecated":false,"replacement_id":null},{"id":"NIS_2_CY","name":"Νόμος 60(Ι)/2025 (Cyprus NIS 2 transposition — amending 89(Ι)/2020)","region":"Cyprus","version":"N. 60(I)/2025 amending N. 89(I)/2020","deprecated":false,"replacement_id":null},{"id":"CYFUN","name":"CyFun® — CyberFundamentals Framework (Belgium)","region":"Belgium","version":"CyFun® 2025, Version 2025-10-01","deprecated":false,"replacement_id":null},{"id":"NIS_2_AT","name":"NISG 2026 (Austria NIS 2 transposition)","region":"Austria","version":"BGBl. I Nr. 94/2025 (NISG 2026)","deprecated":false,"replacement_id":null},{"id":"NIS_2_PL","name":"UKSC (Poland NIS 2 transposition — Dz.U. 2026 poz. 252)","region":"Poland","version":"Ustawa z dnia 5 lipca 2018 r. o KSC, ze zmianami wprowadzonymi ustawą z dnia 23 stycznia 2026 r. (Dz.U. 2026 poz. 252)","deprecated":false,"replacement_id":null},{"id":"NIS_2_FR","name":"France NIS 2 transposition (projet de loi résilience-cybersécurité — pré-promulgation)","region":"France","version":"Sénat T.A. n° 78 (12 mars 2025) — texte AN n° 1112 — bill not yet promulgated as of 2026-05-11","deprecated":false,"replacement_id":null},{"id":"NIST_AI_RMF","name":"NIST AI Risk Management Framework 1.0","region":"US","version":"1.0 (NIST AI 100-1, 2023)","deprecated":false,"replacement_id":null},{"id":"NIST_800_218","name":"NIST SP 800-218 (SSDF) v1.1","region":"US","version":"Version 1.1 (February 2022)","deprecated":false,"replacement_id":null},{"id":"NIST_PRIVACY_FRAMEWORK","name":"NIST Privacy Framework v1.0","region":"US","version":"Version 1.0 (January 2020)","deprecated":false,"replacement_id":null},{"id":"NIST_800_66_R2","name":"NIST SP 800-66 Rev. 2 (HIPAA Security Rule guide)","region":"US","version":"Rev. 2 (February 2024)","deprecated":false,"replacement_id":null},{"id":"CMMC","name":"CMMC 2.0 (DoD Cybersecurity Maturity Model Certification)","region":"US","version":"2.0 — 32 CFR Part 170 (2024) + DFARS 252.204-7021 (2025)","deprecated":false,"replacement_id":null},{"id":"NIST_800_207","name":"NIST SP 800-207 Zero Trust Architecture","region":"US","version":"August 2020 (final)","deprecated":false,"replacement_id":null},{"id":"FEDRAMP","name":"FedRAMP (Federal Risk and Authorization Management Program)","region":"US","version":"Rev. 5 baselines (2023, new authorizations until 2027-06-11) + 20x Phase 3 (CR26, 2026)","deprecated":false,"replacement_id":null},{"id":"CA_PIPEDA","name":"Personal Information Protection and Electronic Documents Act","region":"Canada (federal)","version":"S.C. 2000, c. 5 (current consolidation)","deprecated":false,"replacement_id":null},{"id":"CA_QC_LAW_25","name":"Loi 25 (Act respecting the protection of personal information in the private sector, as amended)","region":"Canada — Quebec","version":"CQLR c. P-39.1 (post-2024 amendments)","deprecated":false,"replacement_id":null},{"id":"FR_SECNUMCLOUD","name":"SecNumCloud v3.2","region":"France","version":"v3.2 (8 March 2022)","deprecated":false,"replacement_id":null},{"id":"CYBER_ESSENTIALS","name":"Cyber Essentials (UK)","region":"UK","version":"Requirements for IT Infrastructure v3.3 (Danzell question set, current from 27 April 2026); v3.2 (Willow) is the legacy grace-period version for pre-cutover accounts","deprecated":false,"replacement_id":null},{"id":"NCSC_CAF","name":"NCSC Cyber Assessment Framework (CAF)","region":"UK","version":"v4.0 (released 4 August 2025; launch blog 6 August 2025)","deprecated":false,"replacement_id":null},{"id":"BSI_GRUNDSCHUTZ","name":"BSI IT-Grundschutz (Kompendium Edition 2023)","region":"Germany","version":"Kompendium Edition 2023; BSI-Standards 200-1/200-2/200-3/200-4","deprecated":false,"replacement_id":null},{"id":"BSI_C5","name":"BSI C5 (Cloud Computing Compliance Criteria Catalogue)","region":"Germany","version":"C5:2020 (operational); C5:2026 (current revision, transition phase)","deprecated":false,"replacement_id":null},{"id":"ISO_27002","name":"ISO/IEC 27002:2022","region":"International","version":"2022","deprecated":false,"replacement_id":null},{"id":"ISO_27017","name":"ISO/IEC 27017:2026","region":"International","version":"2026","deprecated":false,"replacement_id":null},{"id":"ISO_27018","name":"ISO/IEC 27018:2025","region":"International","version":"2025","deprecated":false,"replacement_id":null},{"id":"CH_FADP","name":"Switzerland Federal Act on Data Protection (FADP / nDSG / nLPD)","region":"Switzerland","version":"SR 235.1 — Act of 25 September 2020, in force 2023-09-01","deprecated":false,"replacement_id":null},{"id":"FINMA_23_01","name":"FINMA Circular 2023/1 \"Operational risks and resilience – banks\"","region":"Switzerland","version":"FINMA-RS 23/1, dated 2022-12-07, in force 2024-01-01","deprecated":false,"replacement_id":null},{"id":"CH_ICT_MIN_STD","name":"Switzerland ICT Minimum Standard (IKT-Mindeststandard / Norme minimale TIC)","region":"Switzerland","version":"Minimum standard for improving ICT resilience, Version May 2023, with update NIST SP 800-53 Rev. 5 and ISO 27001:2022; NCSC-owned since 2024-03; proposed medium-term alternative CSRM (BACS Cyber Security and Resilience Method), consultation materials published 2025-11-24, intended to be made available as a recommendation, does not supersede this standard unless a sectoral regulator adapts and declares it binding","deprecated":false,"replacement_id":null},{"id":"IN_DPDPA","name":"India Digital Personal Data Protection Act 2023 (Act No. 22 of 2023) + DPDP Rules 2025","region":"India","version":"Act No. 22 of 2023 (assented 2023-08-11); DPDP Rules 2025 notified 2025-11-13 (phased rollout)","deprecated":false,"replacement_id":null},{"id":"IN_CERT_IN","name":"India CERT-In Directions of 28 April 2022 (No. 20(3)/2022-CERT-In) under s. 70B(6) IT Act 2000","region":"India","version":"No. 20(3)/2022-CERT-In, dated 2022-04-28, effective 2022-06-28","deprecated":false,"replacement_id":null},{"id":"IN_RBI_IT_CYBER","name":"RBI Master Direction on IT Governance, Risk, Controls and Assurance Practices (RBI/2023-24/107) + RBI Cyber Security Framework","region":"India","version":"RBI/2023-24/107 dated 2023-11-07, effective 2024-04-01","deprecated":false,"replacement_id":null},{"id":"IN_SEBI_CSCRF","name":"SEBI Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities","region":"India","version":"SEBI/HO/ITD-1/ITD_CSC_EXT/P/CIR/2024/113 dated 2024-08-20 (with clarifications 2024-12-31 and 2025-08-28; AI vulnerability-detection advisory HO/13/19/12(1)2026-ITD-1_CIMGI/10873/2026 dated 2026-05-05 supplements CSCRF, does not amend it)","deprecated":false,"replacement_id":null},{"id":"UAVG","name":"Netherlands Uitvoeringswet Algemene verordening gegevensbescherming (UAVG)","region":"Netherlands","version":"Stb. 2018, 144 — consolidated tekst geldend van 01-07-2021 (Stb. 2021, 135)","deprecated":false,"replacement_id":null},{"id":"BIO_2","name":"Netherlands Baseline Informatiebeveiliging Overheid 2 (BIO2)","region":"Netherlands","version":"BIO2 v1.3 definitief (9 januari 2026) — Stcrt 2026, 7416","deprecated":false,"replacement_id":null},{"id":"NEN_7510","name":"Netherlands NEN 7510 (Medische informatica — Informatiebeveiliging in de zorg)","region":"Netherlands","version":"NEN 7510-1:2024 + NEN 7510-2:2024+A1:2026","deprecated":false,"replacement_id":null},{"id":"ISO_19011","name":"ISO 19011:2026","region":"International","version":"2026","deprecated":false,"replacement_id":null},{"id":"CIS_CONTROLS_V8","name":"CIS Controls v8.1 (Critical Security Controls)","region":"International","version":"v8.1 (2024)","deprecated":false,"replacement_id":null},{"id":"UK_NIS_2018","name":"Network and Information Systems (NIS) Regulations 2018","region":"UK","version":"SI 2018/506, as amended (last amendment in force: 25 May 2024)","deprecated":false,"replacement_id":null},{"id":"CH_NCS","name":"Switzerland National Cyberstrategy (NCS / Nationale Cyberstrategie / Cyberstratégie nationale)","region":"Switzerland","version":"Federal Council adoption 2023-04-05; cantonal co-adoption 2023-04-13","deprecated":false,"replacement_id":null},{"id":"DIGID_ASSESSMENT","name":"Netherlands ICT-beveiligingsassessments DigiD (Normenkader 3.0)","region":"Netherlands","version":"Normenkader 3.0 (1 augustus 2022) — gepubliceerd door Logius / MinBZK","deprecated":false,"replacement_id":null},{"id":"BE_DPA_2018","name":"Belgian Data Protection Act 30 July 2018 (LPVP / WBP)","region":"Belgium","version":"MB/BS 5 septembre 2018, NUMAC 2018040581 (consolidated through 8 July 2024)","deprecated":false,"replacement_id":null},{"id":"AU_PRIVACY_ACT","name":"Privacy Act 1988 (Cth) + Australian Privacy Principles","region":"Australia","version":"No. 119, 1988 (Compilation C2026C00227, in force 4 June 2026)","deprecated":false,"replacement_id":null},{"id":"ISO_27000","name":"ISO/IEC 27000:2026","region":"International","version":"2026","deprecated":false,"replacement_id":null},{"id":"BDSG","name":"BDSG — Bundesdatenschutzgesetz","region":"Germany","version":"BGBl. 2026 I Nr. 199 (Fassung 10.07.2026)","deprecated":false,"replacement_id":null},{"id":"IN_IRDAI_CS","name":"IRDAI Information and Cybersecurity Guidelines 2026","region":"India","version":"IRDAI/GA&HR/CIR/MISC/51/4/2026 dated 2026-04-06 (supersedes IRDAI/GA&HR/GDL/MISC/88/04/2023)","deprecated":false,"replacement_id":null},{"id":"PCI_DSS","name":"PCI DSS v4.0.1","region":"International","version":"v4.0.1 (June 2024)","deprecated":false,"replacement_id":null},{"id":"UK_FOIA_2000","name":"UK Freedom of Information Act 2000 (c. 36)","region":"UK","version":"c. 36 (2000), general access right in force 2005-01-01","deprecated":false,"replacement_id":null},{"id":"UK_EIR_2004","name":"UK Environmental Information Regulations 2004 (SI 2004/3391)","region":"UK","version":"SI 2004/3391, in force 2005-01-01","deprecated":false,"replacement_id":null},{"id":"AIUC_1","name":"AIUC-1","region":"International","version":"July 15, 2026 release","deprecated":false,"replacement_id":null},{"id":"EN_18286","name":"EN 18286:2026","region":"EU","version":"EN 18286:2026","deprecated":false,"replacement_id":null},{"id":"COBIT_2019","name":"COBIT 2019","region":"International","version":"2019","deprecated":false,"replacement_id":null}]}