{"object":"list","schema_version":"1","count":132,"registry_hash":"264c65d0870ed3df","release":"registry.fly.io/isms-api-prod:deployment-01M3TC1X8MTW7KVWMMQEQFPHSM","data":[{"id":"ISO_27001","name":"ISO/IEC 27001:2022","region":"International","version":"2022","last_verified":"2026-08-25","deprecated":false,"replacement_id":null},{"id":"ISO_42001","name":"ISO/IEC 42001:2023","region":"International","version":"2023","last_verified":"2026-08-25","deprecated":false,"replacement_id":null},{"id":"ISO_27701","name":"ISO/IEC 27701:2025","region":"International","version":"2025","last_verified":"2026-08-25","deprecated":false,"replacement_id":null},{"id":"SOC_2","name":"SOC 2","region":"US","version":"2017 TSC","last_verified":"2026-07-01","deprecated":false,"replacement_id":null},{"id":"HIPAA","name":"HIPAA","region":"US","version":"45 CFR Parts 160, 162, 164 (2013 Omnibus Final Rule as amended through 91 FR 14350, 2026); CMP amounts per 45 CFR 102.3 (2025 adjustment, 91 FR 3665)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"GDPR","name":"GDPR","region":"EU","version":"2016/679","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"CCPA","name":"CCPA","region":"US","version":"CCPA (2018) as amended by CPRA (operative 2023-01-01) and later statutes through AB 137 and AB 566 (2025); CPI-adjusted amounts effective 2025-01-01; CPPA ADMT/cyber-audit/risk-assessment/insurance regulations effective 2026-01-01","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIST_CSF","name":"NIST Cybersecurity Framework 2.0","region":"US","version":"2.0 — NIST CSWP 29, February 26, 2024","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"NIST_800_171","name":"NIST SP 800-171 Rev. 2","region":"US","version":"Rev. 2 — February 2020 (with Update 1, January 28, 2021)","last_verified":"2026-07-01","deprecated":false,"replacement_id":null},{"id":"NIST_800_171_R3","name":"NIST SP 800-171 Rev. 3","region":"US","version":"Rev. 3 — May 14, 2024","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"NIST_800_53","name":"NIST SP 800-53","region":"US","version":"Rev. 5, Release 5.2.0 (August 2025)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"NIS_2","name":"NIS 2","region":"EU","version":"Directive (EU) 2022/2555","last_verified":"2026-07-09","deprecated":false,"replacement_id":null},{"id":"NIS_2_DE","name":"BSIG (Germany NIS 2 transposition)","region":"Germany","version":"BGBl. 2025 I Nr. 301 (zuletzt geändert durch Art. 8 Abs. 1 G v. 23.07.2026, BGBl. 2026 I Nr. 226)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"DORA","name":"DORA","region":"EU","version":"Regulation (EU) 2022/2554","last_verified":"2026-07-22","deprecated":false,"replacement_id":null},{"id":"TISAX","name":"TISAX (VDA ISA 6.0.3)","region":"EU","version":"VDA ISA 6.0.3","last_verified":"2026-08-25","deprecated":false,"replacement_id":null},{"id":"HDS","name":"HDS v2.0","region":"France","version":"v2.0","last_verified":"2026-08-25","deprecated":false,"replacement_id":null},{"id":"ENS","name":"ENS (Esquema Nacional de Seguridad)","region":"Spain","version":"RD 311/2022 (mod. RD 1125/2024)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"ISO_9001","name":"ISO 9001:2015","region":"International","version":"2015","last_verified":"2026-08-25","deprecated":false,"replacement_id":null},{"id":"ISO_22301","name":"ISO 22301:2019","region":"International","version":"2019","last_verified":"2026-08-25","deprecated":false,"replacement_id":null},{"id":"EU_AI_ACT","name":"EU AI Act (Regulation (EU) 2024/1689)","region":"EU","version":"2024/1689 as amended by 2026/1744","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"UK_GDPR","name":"UK GDPR","region":"UK","version":"Retained EU 2016/679, amended by DUA 2025","last_verified":"2026-07-09","deprecated":false,"replacement_id":null},{"id":"UK_DPA_2018","name":"UK Data Protection Act 2018","region":"UK","version":"2018 c.12, amended by DUA 2025","last_verified":"2026-09-23","deprecated":false,"replacement_id":null},{"id":"UK_DUA_2025","name":"Data (Use and Access) Act 2025","region":"UK","version":"2025 c.18","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"AU_ESSENTIAL_EIGHT","name":"Essential Eight Maturity Model (November 2023)","region":"Australia","version":"November 2023","last_verified":"2026-05-05","deprecated":false,"replacement_id":null},{"id":"NIS_2_BE","name":"Loi NIS 2 du 26 avril 2024 / Wet NIS 2 van 26 april 2024 (Belgium)","region":"Belgium","version":"MB/BS 2024-05-17, NUMAC 2024202344; consolidated to 2026-01-19 (CER law of 2025-12-19)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_IT","name":"D.Lgs. 138/2024 (Italy NIS 2 transposition)","region":"Italy","version":"D.Lgs. 4 settembre 2024, n. 138","last_verified":"2026-05-05","deprecated":false,"replacement_id":null},{"id":"NIS_2_CZ","name":"Zákon č. 264/2025 Sb. (Czechia NIS 2 transposition)","region":"Czechia","version":"Zákon č. 264/2025 Sb.","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_SK","name":"Zákon č. 69/2018 Z. z. (Slovakia NIS 2 transposition)","region":"Slovakia","version":"Zákon č. 69/2018 Z. z. v znení 366/2024, 318/2025 a 67/2026 Z. z. (znenie od 30. 4. 2026)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_PT","name":"Decreto-Lei n.º 125/2025 (Portugal NIS 2 transposition — RJC)","region":"Portugal","version":"DL 125/2025, DR I 234/2025-12-04","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_GR","name":"Νόμος 5160/2024 (Greece NIS 2 transposition)","region":"Greece","version":"Ν. 5160/2024, ΦΕΚ Α' 195/27.11.2024 (τροπ. Ν. 5256/2025, ΦΕΚ Α' 223/08.12.2025)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_LT","name":"Kibernetinio saugumo įstatymas Nr. XII-1428 (Lithuania NIS 2 transposition)","region":"Lithuania","version":"Nr. XII-1428 (nauja redakcija Nr. XIV-2902; suvestinė redakcija nuo 2026-07-04, pakeitimai XV-894 ir XV-1076)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_LV","name":"Nacionālās kiberdrošības likums (Latvia NIS 2 transposition)","region":"Latvia","version":"Nacionālās kiberdrošības likums (2024), ar grozījumiem, kas izdarīti ar 04.06.2026. likumu (LV Nr. 115, 17.06.2026.)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_EE","name":"Küberturvalisuse seadus (Estonia NIS 2 transposition)","region":"Estonia","version":"KüTS muudatus 2025 (RT I, 30.12.2025, 4)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_HU","name":"2024. évi LXIX. törvény (Hungary NIS 2 transposition)","region":"Hungary","version":"2024. évi LXIX. törvény + 418/2024 Korm. rend.","last_verified":"2026-05-05","deprecated":false,"replacement_id":null},{"id":"NIS_2_RO","name":"OUG 155/2024 + Legea 124/2025 (Romania NIS 2 transposition)","region":"Romania","version":"OUG 155/2024 (aprobată cu modificări prin Legea 124/2025, completată prin Legea 123/2026)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_BG","name":"Закон за киберсигурност (Bulgaria NIS 2 transposition)","region":"Bulgaria","version":"ЗКС, изм. ДВ бр. 17/2026 и бр. 55/2026","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"IE_DPA_2018","name":"Ireland Data Protection Act 2018 (Number 7 of 2018)","region":"Ireland","version":"Number 7 of 2018, substantially commenced 2018-05-25 (s. 30 not commenced)","last_verified":"2026-09-29","deprecated":false,"replacement_id":null},{"id":"NIS_2_IE","name":"Ireland NIS 2 transposition (National Cyber Security Bill 2024 — pre-enactment)","region":"Ireland","version":"General Scheme 2024-08-30 (Bill not yet published or enacted as of 2026-09-24)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"NIS_2_FI","name":"Kyberturvallisuuslaki 124/2025 (Finland NIS 2 transposition)","region":"Finland","version":"Kyberturvallisuuslaki 124/2025, muutettu 369/2025, 494/2025, 698/2025, 997/2025, 441/2026 ja 785/2026 (ajantasa 4.9.2026)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_DK","name":"NIS 2-loven (Lov nr. 434 af 6. maj 2025) (Denmark NIS 2 transposition)","region":"Denmark","version":"LOV nr. 434 af 06/05/2025","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_SE","name":"Cybersäkerhetslag (2025:1506) (Sweden NIS 2 transposition)","region":"Sweden","version":"SFS 2025:1506","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_SI","name":"Zakon o informacijski varnosti (ZInfV-1) (Slovenia NIS 2 transposition)","region":"Slovenia","version":"ZInfV-1, Uradni list RS 40/2025","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_HR","name":"Zakon o kibernetičkoj sigurnosti (Croatia NIS 2 transposition)","region":"Croatia","version":"NN 14/2024 + Uredba NN 135/2024","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_MT","name":"S.L. 460.41 (Malta NIS 2 transposition — LN 71/2025 as amended by LN 89/2026)","region":"Malta","version":"S.L. 460.41 (Cap. 460); LN 71/2025 as amended by LN 89/2026 (point in time 7 April 2026)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_CY","name":"Νόμος 60(Ι)/2025 (Cyprus NIS 2 transposition — amending 89(Ι)/2020)","region":"Cyprus","version":"N. 60(I)/2025 amending N. 89(I)/2020","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"CYFUN","name":"CyFun® — CyberFundamentals Framework (Belgium)","region":"Belgium","version":"CyFun® 2025, Version 2025-10-01","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"NIS_2_AT","name":"NISG 2026 (Austria NIS 2 transposition)","region":"Austria","version":"BGBl. I Nr. 94/2025 (NISG 2026)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_PL","name":"UKSC (Poland NIS 2 transposition — Dz.U. 2026 poz. 252)","region":"Poland","version":"Ustawa z dnia 5 lipca 2018 r. o KSC (t.j. Dz.U. 2026 poz. 20, ze zm. poz. 252, 815, 1003)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIS_2_FR","name":"France NIS 2 transposition (projet de loi résilience-cybersécurité — pré-promulgation)","region":"France","version":"Sénat T.A. n° 78 (12 mars 2025), texte AN n° 1112, texte de la commission n° 1779-A0; bill not yet promulgated as of 2026-09-24","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"NIST_AI_RMF","name":"NIST AI Risk Management Framework 1.0","region":"US","version":"1.0 (NIST AI 100-1, 2023)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"NIST_800_218","name":"NIST SP 800-218 (SSDF) v1.1","region":"US","version":"Version 1.1 (February 2022)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"NIST_PRIVACY_FRAMEWORK","name":"NIST Privacy Framework v1.0","region":"US","version":"Version 1.0 (January 2020)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"NIST_800_66_R2","name":"NIST SP 800-66 Rev. 2 (HIPAA Security Rule guide)","region":"US","version":"Rev. 2 (February 2024)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"CMMC","name":"CMMC 2.0 (DoD Cybersecurity Maturity Model Certification)","region":"US","version":"2.0 — 32 CFR Part 170 (2024) + DFARS 252.204-7021 (2025)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"NIST_800_207","name":"NIST SP 800-207 Zero Trust Architecture","region":"US","version":"August 2020 (final)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"FEDRAMP","name":"FedRAMP (Federal Risk and Authorization Management Program)","region":"US","version":"Consolidated Rules for 2026 (CR26): 20x Classes A-C + Rev5 baselines (new Rev5 applications until 2027-06-11)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"CA_PIPEDA","name":"Personal Information Protection and Electronic Documents Act","region":"Canada (federal)","version":"S.C. 2000, c. 5 (consolidation current to 2026-09-03, last amended 2025-03-04)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"CA_QC_LAW_25","name":"Loi 25 (Act respecting the protection of personal information in the private sector, as amended)","region":"Canada — Quebec","version":"CQLR c. P-39.1 (post-2024 amendments)","last_verified":"2026-05-12","deprecated":false,"replacement_id":null},{"id":"FR_SECNUMCLOUD","name":"SecNumCloud v3.2","region":"France","version":"v3.2 (8 March 2022)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"CYBER_ESSENTIALS","name":"Cyber Essentials (UK)","region":"UK","version":"Requirements for IT Infrastructure v3.3 (Danzell question set, current from 27 April 2026); v3.2 (Willow) is the legacy grace-period version for pre-cutover accounts","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NCSC_CAF","name":"NCSC Cyber Assessment Framework (CAF)","region":"UK","version":"v4.0 (released 4 August 2025; launch blog 6 August 2025)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"BSI_GRUNDSCHUTZ","name":"BSI IT-Grundschutz (Kompendium Edition 2023)","region":"Germany","version":"Kompendium Edition 2023; BSI-Standards 200-1/200-2/200-3/200-4","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"BSI_C5","name":"BSI C5:2020 (Cloud Computing Compliance Criteria Catalogue)","region":"Germany","version":"C5:2020 (January 2020)","last_verified":"2026-07-15","deprecated":false,"replacement_id":null},{"id":"ISO_27002","name":"ISO/IEC 27002:2022","region":"International","version":"2022","last_verified":"2026-09-13","deprecated":false,"replacement_id":null},{"id":"ISO_27017","name":"ISO/IEC 27017:2026","region":"International","version":"2026","last_verified":"2026-07-29","deprecated":false,"replacement_id":null},{"id":"ISO_27018","name":"ISO/IEC 27018:2025","region":"International","version":"2025","last_verified":"2026-09-13","deprecated":false,"replacement_id":null},{"id":"CH_FADP","name":"Switzerland Federal Act on Data Protection (FADP / nDSG / nLPD)","region":"Switzerland","version":"SR 235.1 — Act of 25 September 2020, in force 2023-09-01","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"FINMA_23_01","name":"FINMA Circular 2023/1 \"Operational risks and resilience – banks\"","region":"Switzerland","version":"FINMA-RS 23/1, dated 2022-12-07, in force 2024-01-01","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"CH_ICT_MIN_STD","name":"Switzerland ICT Minimum Standard (IKT-Mindeststandard / Norme minimale TIC)","region":"Switzerland","version":"Minimum standard for improving ICT resilience, Version May 2023, with update NIST SP 800-53 Rev. 5 and ISO 27001:2022; NCSC-owned since 2024-03; proposed medium-term alternative CSRM (BACS Cyber Security and Resilience Method), consultation materials published 2025-11-24, intended to be made available as a recommendation, does not supersede this standard unless a sectoral regulator adapts and declares it binding","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"IN_DPDPA","name":"India Digital Personal Data Protection Act 2023 (Act No. 22 of 2023) + DPDP Rules 2025","region":"India","version":"Act No. 22 of 2023 (assented 2023-08-11); DPDP Rules 2025 notified 2025-11-13 (phased rollout)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"IN_CERT_IN","name":"India CERT-In Directions of 28 April 2022 (No. 20(3)/2022-CERT-In) under s. 70B(6) IT Act 2000","region":"India","version":"No. 20(3)/2022-CERT-In, dated 2022-04-28, effective 2022-06-28","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"IN_RBI_IT_CYBER","name":"RBI Cybersecurity, Technology: Risk, Resilience and Assurance Framework Directions, 2026 (entity-wise; replaced RBI/2023-24/107 and the 2016 Cyber Security Framework in Banks)","region":"India","version":"RBI (Commercial Banks and sibling entity-wise) Cybersecurity, Technology: Risk, Resilience and Assurance Framework Directions, 2026, dated 2026-07-31, in force on issue","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"IN_SEBI_CSCRF","name":"SEBI Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities","region":"India","version":"SEBI/HO/ITD-1/ITD_CSC_EXT/P/CIR/2024/113 dated 2024-08-20, read with clarifications 2024/184 (2024-12-31), 2025/60 (2025-04-30) and 2025/119 (2025-08-28, re-categorising Portfolio Managers and Merchant Bankers); AI vulnerability-detection advisory HO/13/19/12(1)2026-ITD-1_CIMGI/10873/2026 dated 2026-05-05 and FIRE-format incident reporting portal circular HO/(449)2026-ITD-5_DIV1/I/19448/2026 dated 2026-08-24 are read with CSCRF, do not amend it","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"UAVG","name":"Netherlands Uitvoeringswet Algemene verordening gegevensbescherming (UAVG)","region":"Netherlands","version":"Stb. 2018, 144, consolidated tekst geldend van 01-09-2026 (laatst gewijzigd bij Stb. 2026, 154, Verzamelwet gegevensbescherming)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"BIO_2","name":"Netherlands Baseline Informatiebeveiliging Overheid 2 (BIO2)","region":"Netherlands","version":"BIO2 v1.3 definitief (9 januari 2026) — Stcrt 2026, 7416","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"NEN_7510","name":"Netherlands NEN 7510 (Medische informatica — Informatiebeveiliging in de zorg)","region":"Netherlands","version":"NEN 7510-1:2024 + NEN 7510-2:2024+A1:2026","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"ISO_19011","name":"ISO 19011:2026","region":"International","version":"2026","last_verified":"2026-07-06","deprecated":false,"replacement_id":null},{"id":"CIS_CONTROLS_V8","name":"CIS Controls v8.1 (Critical Security Controls)","region":"International","version":"v8.1 (2024)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"UK_NIS_2018","name":"Network and Information Systems (NIS) Regulations 2018","region":"UK","version":"SI 2018/506, as amended (last amendment in force: 25 May 2024)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"CH_NCS","name":"Switzerland National Cyberstrategy (NCS / Nationale Cyberstrategie / Cyberstratégie nationale)","region":"Switzerland","version":"Federal Council adoption 2023-04-05; cantonal co-adoption 2023-04-13","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"DIGID_ASSESSMENT","name":"Netherlands ICT-beveiligingsassessments DigiD (Normenkader 3.0)","region":"Netherlands","version":"Normenkader 3.0 (1 augustus 2022), vastgesteld door BZK, gepubliceerd door Logius","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"BE_DPA_2018","name":"Belgian Data Protection Act 30 July 2018 (LPVP / WBP)","region":"Belgium","version":"MB/BS 5 septembre 2018, NUMAC 2018040581 (JUSTEL consolidated through 2 April 2026, incl. Loi du 30 mars 2026 in force 1 September 2026)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"AU_PRIVACY_ACT","name":"Privacy Act 1988 (Cth) + Australian Privacy Principles","region":"Australia","version":"No. 119, 1988 (Compilation C2026C00227, in force 4 June 2026)","last_verified":"2026-07-17","deprecated":false,"replacement_id":null},{"id":"ISO_27000","name":"ISO/IEC 27000:2026","region":"International","version":"2026","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"BDSG","name":"BDSG — Bundesdatenschutzgesetz","region":"Germany","version":"BGBl. 2026 I Nr. 199 (Fassung 10.07.2026)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"IN_IRDAI_CS","name":"IRDAI Information and Cybersecurity Guidelines 2026","region":"India","version":"IRDAI/GA&HR/CIR/MISC/51/4/2026 dated 2026-04-06 (supersedes IRDAI/GA&HR/GDL/MISC/88/04/2023)","last_verified":"2026-07-15","deprecated":false,"replacement_id":null},{"id":"PCI_DSS","name":"PCI DSS v4.0.1","region":"International","version":"v4.0.1 (June 2024)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"UK_FOIA_2000","name":"UK Freedom of Information Act 2000 (c. 36)","region":"UK","version":"c. 36 (2000), general access right in force 2005-01-01","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"UK_EIR_2004","name":"UK Environmental Information Regulations 2004 (SI 2004/3391)","region":"UK","version":"SI 2004/3391, in force 2005-01-01","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"AIUC_1","name":"AIUC-1","region":"International","version":"July 15, 2026 release","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"EN_18286","name":"EN 18286:2026","region":"EU","version":"EN 18286:2026","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"COBIT_2019","name":"COBIT 2019","region":"International","version":"2019","last_verified":"2026-08-01","deprecated":false,"replacement_id":null},{"id":"CA_AB_PIPA","name":"Personal Information Protection Act (Alberta)","region":"Canada — Alberta","version":"SA 2003, c. P-6.5 (current as of 2025-09-01)","last_verified":"2026-08-13","deprecated":false,"replacement_id":null},{"id":"SG_MAS_TRM","name":"MAS Technology Risk Management Guidelines","region":"Singapore","version":"January 2021 (issued 18 January 2021)","last_verified":"2026-08-13","deprecated":false,"replacement_id":null},{"id":"SG_PDPA","name":"Singapore Personal Data Protection Act 2012 (Act 26 of 2012)","region":"Singapore","version":"2020 Revised Edition (Act 26 of 2012; in operation 31 Dec 2021; incl. Act 40 of 2020, Act 25 of 2021, Act 19 of 2025)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"CA_BC_PIPA","name":"Personal Information Protection Act (British Columbia)","region":"Canada — British Columbia","version":"SBC 2003, c. 63 (consolidation current to 2026-08-04)","last_verified":"2026-08-13","deprecated":false,"replacement_id":null},{"id":"CA_OSFI_B13","name":"OSFI Guideline B-13 — Technology and Cyber Risk Management","region":"Canada (federal)","version":"Final Guideline (released 13 July 2022, amended February 2024), effective 1 January 2024","last_verified":"2026-08-13","deprecated":false,"replacement_id":null},{"id":"JP_APPI","name":"Japan Act on the Protection of Personal Information (APPI) (Act No. 57 of 2003)","region":"Japan","version":"Act No. 57 of 2003, consolidated text in force on 2026-09-24 (e-Gov revision of 2026-07-17); Act No. 56 of 2026 promulgated 2026-07-17, main provisions not yet in force","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"JP_MY_NUMBER_ACT","name":"Japan My Number Act (Act No. 27 of 2013)","region":"Japan","version":"Act No. 27 of May 31, 2013 (Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures); article map follows the official English translation snapshot (translated through Act No. 63 of 2013), later Japanese amendments not yet reflected","last_verified":"2026-08-24","deprecated":false,"replacement_id":null},{"id":"JP_METI_CYBERSECURITY_MGMT","name":"Japan METI/IPA Cybersecurity Management Guidelines Ver. 3.0","region":"Japan","version":"Ver. 3.0 (METI/IPA, 2023)","last_verified":"2026-08-24","deprecated":false,"replacement_id":null},{"id":"JP_JIS_Q_27001","name":"Japan JIS Q 27001:2025 (Japanese adoption of ISO/IEC 27001:2022)","region":"Japan","version":"JIS Q 27001:2025 (= ISO/IEC 27001:2022 + Amd 1:2024; applied with JIS Q 27001:2023); JIS Q 27002:2024 (= ISO/IEC 27002:2022)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"AU_ISM","name":"Australian Government Information Security Manual (ASD ISM)","region":"Australia","version":"September 2026 release (OSCAL catalog v2026.09.4)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"AU_CPS_234","name":"APRA Prudential Standard CPS 234 — Information Security","region":"Australia","version":"CPS 234 (commenced 1 July 2019)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NZ_PRIVACY_ACT_2020","name":"Privacy Act 2020 (NZ) + Information Privacy Principles","region":"New Zealand","version":"Public Act 2020 No 31, version as at 1 May 2026 (principal provisions in force 1 December 2020, ss 32-38 and 213-215 from 1 July 2020; IPP 3A in force 1 May 2026)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NZ_NZISM","name":"New Zealand Information Security Manual (NZISM)","region":"New Zealand","version":"Version 3.9 (November 2025)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"ISO_SAE_21434","name":"ISO/SAE 21434:2021","region":"International","version":"ISO/SAE 21434:2021","last_verified":"2026-08-26","deprecated":false,"replacement_id":null},{"id":"UN_R155","name":"UN Regulation No. 155 (Vehicle Cyber Security / CSMS)","region":"International","version":"UN R155 original version up to Supplement 3 (in force 10 January 2025) + companion UN R156 (SUMS)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"HITRUST","name":"HITRUST CSF v11.8.0","region":"US","version":"HITRUST CSF v11.8.0 (2026)","last_verified":"2026-08-28","deprecated":false,"replacement_id":null},{"id":"KR_ISMS_P","name":"K-ISMS / ISMS-P (South Korea)","region":"South Korea","version":"ISMS-P certification criteria notice (PIPC Notice 2024-8 / MSIT Notice 2024-30, in force 2024-07-24); PIPA mandatory privacy certification enacted for 2027-07-01 (Act No. 21445); 2026 reform plan pending","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"SG_MTCS","name":"MTCS (SS 584:2020)","region":"Singapore","version":"SS 584:2020 (second revision)","last_verified":"2026-08-28","deprecated":false,"replacement_id":null},{"id":"AU_NSW_CSP","name":"NSW Cyber Security Policy (Cyber Security NSW)","region":"Australia","version":"2026-2027 (July 2026)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"AU_VIC_VPDSS","name":"Victorian Protective Data Security Standards (VPDSS) v2.0","region":"Australia","version":"V2.0 (issued 28 October 2019)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"AU_WA_CSP","name":"WA Cyber Security Policy (2024)","region":"Australia","version":"2024 (PDF dated November 2024)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"CRA","name":"CRA (EU Cyber Resilience Act)","region":"EU","version":"Regulation (EU) 2024/2847","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"EASA_PART_IS","name":"EASA Part-IS (Regulations (EU) 2023/203 and 2022/1645)","region":"EU","version":"Reg (EU) 2023/203 (27 Oct 2022, as amended to 2025/2293) + Delegated Reg (EU) 2022/1645 (14 Jul 2022, as amended by 2025/22)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"UK_CAA_CYBER_OVERSIGHT","name":"UK CAA Cyber Security Oversight (CAP 1753 / CAF for Aviation CAP 1850)","region":"UK","version":"CAP 1753 Issue 3 (April 2024) + CAP 1850 second publication (August 2020)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"DO_326A_ED_202A","name":"Airworthiness Security: RTCA DO-326A/B and EUROCAE ED-202A/B set (with EASA AMC 20-42)","region":"International","version":"DO-326A (Aug 2014) / ED-202A (May 2014); DO-326B (26 Sep 2024) / ED-202B (Oct 2024); AMC 20-42 (ED Decision 2020/006/R)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NIST_IR_8401","name":"NIST IR 8401 Satellite Ground Segment CSF Profile (with IR 8270 / IR 8441 / SPD-5)","region":"US","version":"NIST IR 8401 (December 2022); IR 8270 (July 2023); IR 8441 (September 2023)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"NASA_STD_1006","name":"NASA-STD-1006A Space System Protection Standard","region":"US","version":"NASA-STD-1006A (approved 2022-07-15)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"CCSDS_SECURITY","name":"CCSDS Space Data Systems Security Standards (350-357 series)","region":"International","version":"CCSDS 350-357 security books as listed in the ccsds.org publications catalogue, September 2026","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"ECSS_E_ST_80C","name":"ECSS-E-ST-80C Space engineering: Security in space systems lifecycles","region":"Europe","version":"ECSS-E-ST-80C (1 July 2024)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"IEC_62443","name":"IEC 62443 industrial automation and control systems security (parts 2-1, 3-2, 3-3, 4-1)","region":"International","version":"62443-2-1:2024 Ed. 2.0; 62443-3-2:2020 Ed. 1.0; 62443-3-3:2013 Ed. 1.0 (2014 corrigendum tracked); 62443-4-1:2018 Ed. 1.0","last_verified":"2026-09-08","deprecated":false,"replacement_id":null},{"id":"NIST_800_82","name":"NIST SP 800-82 Rev. 3 Guide to Operational Technology (OT) Security","region":"US","version":"Rev. 3 (September 2023)","last_verified":"2026-09-25","deprecated":false,"replacement_id":null},{"id":"ISO_27019","name":"ISO/IEC 27019:2024 Information security controls for the energy utility industry","region":"International","version":"2nd edition (2024)","last_verified":"2026-09-08","deprecated":false,"replacement_id":null},{"id":"IT_GARANTE_COOKIE","name":"Linee guida cookie e altri strumenti di tracciamento (Garante Privacy)","region":"Italy","version":"Provvedimento n. 231 del 10 giugno 2021","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"NEN_7512","name":"Netherlands NEN 7512 (Medische informatica - Informatiebeveiliging in de zorg - Vertrouwensbasis voor gegevensuitwisseling)","region":"Netherlands","version":"NEN 7512:2022 (publicatie 1 juli 2022)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"FINMA_18_03","name":"FINMA Circular 2018/3 \"Outsourcing\" (banks, insurance companies and selected financial institutions under FinIA)","region":"Switzerland","version":"FINMA Circ. 18/3, dated 2017-09-21, in force 2018-04-01, last amended 2020-11-04 (in force 2021-01-01)","last_verified":"2026-09-24","deprecated":false,"replacement_id":null},{"id":"DORA_RTS_2024_1774","name":"DORA RTS on ICT Risk Management","region":"EU","version":"Delegated Regulation (EU) 2024/1774","last_verified":"2026-09-28","deprecated":false,"replacement_id":null},{"id":"NIS2_IR_2024_2690","name":"NIS 2 Implementing Regulation (EU) 2024/2690","region":"EU","version":"Implementing Regulation (EU) 2024/2690","last_verified":"2026-09-28","deprecated":false,"replacement_id":null},{"id":"NIS_2_NL","name":"Cyberbeveiligingswet (Netherlands NIS 2 transposition)","region":"Netherlands","version":"Stb. 2026, 187 (Cyberbeveiligingswet)","last_verified":"2026-09-30","deprecated":false,"replacement_id":null},{"id":"NIS_2_ES","name":"Spain NIS 2 status (Ley de Coordinación y Gobernanza de la Ciberseguridad pending; RD-ley 12/2018 in force)","region":"Spain","version":"Transposition pending (anteproyecto 14.1.2025); in force: RD-ley 12/2018 and RD 43/2021","last_verified":"2026-09-30","deprecated":false,"replacement_id":null},{"id":"NIS_2_LU","name":"Loi du 5 mai 2026 (Luxembourg NIS 2 transposition)","region":"Luxembourg","version":"Loi du 5 mai 2026, Mémorial A n° 225 du 6 mai 2026","last_verified":"2026-09-30","deprecated":false,"replacement_id":null}]}