Industry-leading best practices

Let's summarize the following pages about industry best practices, frameworks, and standards regarding cybersecurity and data security.

Regulations and standards

PCI-DSS is the standard that must be used by companies that deal with credit card information and payment data. Their official site is as follows: https://www.pcisecuritystandards.org/

HIPAA is a US regulation designed to protect sensitive medical records of patients: https://www.hhs.gov/hipaa/index.html

GDPR is a regulation created by the European Union to protect the personal data of their citizens: https://gdpr.eu/

As mentioned previously in the book, remember that you must always research to find application regulations regarding your company's location, clients, and the market to avoid unnecessary penalties and sanctions.

Cybersecurity frameworks, standards, and more

Now, let's close with a list of the leading frameworks, standards, and other must-have...