The European Commission (EC) is the executive branch of the European Union (EU), responsible for proposing legislation, implementing decisions, upholding the EU treaties and managing the day-to-day business of the EU. The Commission helps to shape th...
Shared Assessments has been the standard for third-party risk management since 2005, when they were developed by the Big Four and six global banks to address inefficiencies surrounding vendor risk management. Using a robust compilation of questions, ...
Update: Effective December 2022, ISO 27001:2022 and ISO 27002:2022 are now available. ISO/IEC 27001 specifies the requirements for establishing, implementing, operating, monitoring, reviewing, maintaining and improving a documented Information Securi...
The National Institute of Standards and Technology (NIST) is a part of the U.S. Department of Commerce. The NIST mission is to promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways ...
The Archer Question Library is a central repository for assessment-based content that might be used to drive questionnaire generation or facilitate compliance assessments. Out-of-the-box the Archer Question library contains several thousand questions...
The Secure Controls Framework organization is made up of volunteers, mainly specialists within the cybersecurity profession, who focus on both Governance, Risk and Compliance (GRC) and the cybersecurity side of privacy. These are auditors, engineers,...
The Act on Corporate Due Diligence Obligations in Supply Chains requires enterprises that have their central administration, principal place of business, administrative headquarters, statutory seat or branch office in Germany under the obligation to ...
The North American Electric Reliability Corporation is a nonprofit corporation which was formed by the electric utility industry to promote the reliability and adequacy of bulk power transmission in the electric utility systems of North America. NERC...
This Authoritative Source was developed by Archer Exchange Technology Partner, COGRIS. COGRIS provides consultancy, assessment, training and implementation services on Integrated Risk Management strategies, processes, solutions, maturity assessments,...
This Authoritative Source was developed by Archer Exchange Technology partner, COGRIS. COGRIS provides consultancy, assessment, training and implementation services on Integrated Risk Management strategies, processes, solutions, maturity assessments,...
This Authoritative Source was developed by Archer Exchange Technology partner, COGRIS. COGRIS provides consultancy, assessment, training and implementation services on Integrated Risk Management strategies, processes, solutions, maturity assessments,...
This Authoritative Source was developed by Archer Exchange Technology partner, COGRIS. COGRIS provides consultancy, assessment, training and implementation services on Integrated Risk Management strategies, processes, solutions, maturity assessments,...
The Australian Energy Market Operator (AEMO) is responsible for managing the electricity and gas systems and markets across Australia, helping to ensure Australians have access to affordable, secure and reliable energy. The Australian Energy Sector C...
The Committee on National Security Systems (CNSS) Instruction No. 1253, Security Categorization and Control Selection for National Security Systems, provides all Federal Government departments, agencies, bureaus, and offices with guidance on the firs...
This authoritative source comprises the breach notification laws for the 50 U.S. States and territories. Data Breach Laws are available as authoritative source content for the following laws: AK 45.48: Alaska State Breach Notification Law (AK 45.48.0...
The Payment Card Industry Data Security Standard is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehe...
The Cybersecurity and Infrastructure Security Agency (CISA) leads the national effort to understand, manage, and reduce risk to cyber and physical infrastructure. CISA connects stakeholders in industry and government to each other and to resources, a...
The Centers for Medicare & Medicaid Services, CMS, is part of the Department of Health and Human Services (HHS). Four sources are available for the Centers of Medicare and Medicaid Services: EHR Meaningful Use The Medicare and Medicaid EHR Incentive ...
This authoritative source comprises state privacy laws for the following U.S. States: California - California Consumer Privacy Act (CCPA) Colorado - Colorado Privacy Act Massachusetts - MA 4806 Maryland - MD 14-3504 Maine - ME 9301 New Jersey - NJ S5...
European Insurance and Occupational Pensions Authority (EIOPA) is an independent advisory body to the European Commission, the European Parliament and the Council of the European Union. EIOPA is one of three European Supervisory Authorities. The othe...
ChristineTran
JordanBauman
SusanReadMiller
GloriaHigley
WesleyLoeffler
DanAbrahamson
CoreyCarpenter1
Chris_D
KanishakaJain
SueJessee
