Security and compliance certifications
Many compliance certifications to protect customer privacy and secure data depend on your industry and your geographical location. For any solution design, compliance requirements are among the critical criteria that need to be evaluated. The following are some of the most widely known geographical and industry-standard compliances:
- Global compliance includes certifications that all organizations must adhere to, regardless of their region. These include ISO 9001, ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC 3, and CSA STAR for cloud security.
- The US government requires various kinds of compliance to handle the public sector workload. These include FedRAMP, DoD SRG Level-2, 4, and 5, FIPS 140, NIST SP 800, IRS 1075, ITAR, VPAT, and CJIS.
- Industry-level compliance of an application applies to particular industries. These include PCI DSS, CDSA, MPAA, FERPA, CMS MARS-E, NHS IG Toolkit (in the UK), HIPAA, FDA, FISC (in...
