美國
(32 項標準)地區: 美國
SOC 2 Type II
Service Organization Control - Trust Services Criteria
HIPAA
Health Insurance Portability and Accountability Act — US Public Law 104-191
CCPA/CPRA
California Consumer Privacy Act & California Privacy Rights Act
FCC Certification
Federal Communications Commission Equipment Authorization for Radio Frequency Devices
FDA 510(k)
Premarket Notification — US Medical Device Clearance Program
Proposition 65
California Safe Drinking Water and Toxic Enforcement Act of 1986
NIST CSF 2.0
Cybersecurity Framework 2.0 — Framework for Improving Critical Infrastructure Cybersecurity
CMMC 2.0
Cybersecurity Maturity Model Certification — Defense Industrial Base Cybersecurity Standard
FedRAMP
Federal Risk and Authorization Management Program — Cloud Service Security Authorization
SOX
Sarbanes-Oxley Act of 2002 — U.S. Public Company Accounting Reform and Investor Protection Act
FERPA
Family Educational Rights and Privacy Act of 1974
COPPA
Children's Online Privacy Protection Act of 1998
GMP (cGMP)
Good Manufacturing Practice — WHO Guidelines & FDA 21 CFR 210/211
IEC 62304:2006+A1:2015
Medical device software — Software life cycle processes
NERC CIP
North American Electric Reliability Corporation — Critical Infrastructure Protection Standards
NYDFS 23 NYCRR 500
New York Department of Financial Services — Cybersecurity Requirements for Financial Services Companies
HITRUST CSF
HITRUST Common Security Framework — Healthcare-Focused Certifiable Security & Privacy Framework
NIST AI RMF 1.0
AI Risk Management Framework — NIST AI 100-1
Colorado ADMT Act
Consumer Protections for Automated Decision-Making Technology — SB24-205 as amended by SB26-189
SOC 1 Type II
Service Organization Control 1 — Internal Controls over Financial Reporting (SSAE 18)
US Corporate Transparency Act
Beneficial Ownership Information Reporting — 31 U.S.C. 5336 and 31 CFR 1010.380
ADA Title II Web Accessibility
28 CFR Part 35 — Web and Mobile Accessibility for State and Local Governments (WCAG 2.1 AA)
US Bank Secrecy Act / AML
Bank Secrecy Act (Currency and Foreign Transactions Reporting Act) — 31 U.S.C. 5311 et seq. and 31 CFR Chapter X
NIST SP 800-171
NIST Special Publication 800-171 Revision 3 — Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
NIST SP 800-53
Security and Privacy Controls for Information Systems and Organizations — NIST SP 800-53 Rev. 5 (Release 5.2.0)
OFAC Sanctions Compliance (SDN Screening)
A Framework for OFAC Compliance Commitments — Economic Sanctions Regulations, 31 CFR Chapter V (SDN List screening under IEEPA/TWEA)
California SB 253
Climate Corporate Data Accountability Act — SB 253 (Chapter 382, Statutes of 2023; Health & Safety Code §38532), as amended by SB 219
UL Listing / Certification
UL Solutions Product Certification — OSHA Nationally Recognized Testing Laboratory (NRTL) Safety Mark
GLBA Safeguards Rule
Standards for Safeguarding Customer Information — 16 CFR Part 314 (Gramm-Leach-Bliley Act)
Basel III / Basel III Endgame
Basel III: Finalising post-crisis reforms (BCBS d424) — Global bank capital, leverage and liquidity framework
ANSI/ESD S20.20
Requirements for the Development, Implementation and Maintenance of an ESD Control Program
IEEE 1680-2018
Standard for Environmental Assessment of Personal Computer Products — EPEAT