Standards & Frameworks

ITAF, COBIT, ISO/IEC 27001, NIST CSF and the other standards CISA and CISM cite: what each one is, its key points and how it is tested.

• ISACA Code of Professional Ethics — ISACA — Audit standard
• ITAF — ISACA — Audit standard
• COBIT 2019 — ISACA — Governance framework
• ISO/IEC 27001:2022 — ISO/IEC — Security standard
• ISO/IEC 27002:2022 — ISO/IEC — Security standard
• ISO/IEC 27005 — ISO/IEC — Risk framework
• ISO 22301 — ISO — Continuity standard
• NIST Cybersecurity Framework 2.0 — NIST — Security framework
• NIST SP 800-53 — NIST — Security standard
• NIST SP 800-61 — NIST — Incident guidance
• NIST SP 800-207 — NIST — Security architecture
• NIST SP 800-63B — NIST — Identity guidance
• NIST SP 800-88 — NIST — Media sanitization
• NIST SP 800-161 — NIST — Supply chain guidance
• NIST AI RMF (AI 100-1) — NIST — Risk framework
• NIST FIPS 203, 204 and 205 — NIST — Cryptography standard
• SOC 2 — AICPA — Assurance report
• PCI DSS — PCI Security Standards Council — Industry standard
• OWASP Top 10 — OWASP — Application security
• MITRE ATT&CK — MITRE — Threat framework