FISMA: Federal Information Security Management Act - Sets comprehensive framework for protecting government information, operations and assets against natural or man-made threats

CISA: Cybersecurity Information Sharing Act - Designed to improve cybersecurity in the United States through enhanced sharing of information about cybersecurity threats

Privacy Act 1974: Establishes a code of fair information practices governing the collection, maintenance, use, and dissemination of personal information maintained by federal agencies

CFAA: Computer Fraud and Abuse Act - Federal legislation that criminalizes computer-related fraud and unauthorized access to protected computers

HIPAA: Health Insurance Portability and Accountability Act - Federal law that requires the creation of national standards to protect sensitive patient health information

GLBA: Gramm-Leach-Bliley Act - Requires financial institutions to explain their information-sharing practices and protect sensitive data

PCI DSS: Payment Card Industry Data Security Standard - Information security standard for organizations that handle branded credit cards

FERPA: Family Educational Rights and Privacy Act - Federal law that protects the privacy of student education records

State Breach Laws: Various state-specific laws requiring notification of security breaches involving personal information

FAR: Federal Acquisition Regulation - Principal set of rules governing the federal government's purchasing process

NIST Framework: National Institute of Standards and Technology Cybersecurity Framework - Guidelines and best practices for managing cybersecurity risks

ISO 27001: International standard for information security management systems (ISMS)

SANS Guidelines: Security standards and guidelines developed by the SANS Institute for various aspects of cybersecurity

UCC: Uniform Commercial Code - Laws governing commercial transactions, including contract formation and enforcement

Professional Liability: Requirements for professional liability insurance coverage for security assessment providers

Cyber Insurance: Requirements for cyber insurance coverage to protect against data breaches and cyber incidents