There are many standards in different sectors that have to be followed, and to which organizations are required to be compliant, in order to perform certain business operations or to ensure the security of their information. For example, most payment gateways, or any payment-related functionality, are required to be tested against the PCI standard to be considered secure.
The following are some of the standards in the market to which relevant organizations are expected to be compliant:
- ETSI Cybersecurity technical committee (TC CYBER)
- ISO/IEC 27001 and 27002
- CISQ
- DoCRA
- NERC
- NIST
- ISO 15408
- RFC 2196
- ANSI/ISA 62443 (formerly ISA-99)
- The ISA Security Compliance Institute (ISCI) Conformity Assessment Program
- ISCI Certification ...
