FISMA: Federal Information Security Management Act - Provides a comprehensive framework for ensuring the effectiveness of information security controls over federal information resources

Privacy Act of 1974: Establishes a code of fair information practices governing the collection, maintenance, use, and dissemination of personal information maintained by federal agencies

CFAA: Computer Fraud and Abuse Act - Addresses computer-related crimes and provides both criminal and civil penalties for unauthorized access to computer systems

GLBA: Gramm-Leach-Bliley Act - Requires financial institutions to explain their information-sharing practices and protect sensitive data

HIPAA: Health Insurance Portability and Accountability Act - Sets national standards for the protection of individuals' medical records and other personal health information

PCI DSS: Payment Card Industry Data Security Standard - Security standards for organizations that handle credit card data to ensure protection of cardholder information

SOX: Sarbanes-Oxley Act - Requires proper financial disclosure from corporations and establishes standards for IT security and control

NIST SP 800-53: National Institute of Standards and Technology Special Publication providing security and privacy controls for federal information systems

NIST CSF: NIST Cybersecurity Framework - Voluntary guidance for private sector organizations to better manage and reduce cybersecurity risk

State Breach Laws: Various state-specific laws requiring notification of security breaches involving personal information

FAR: Federal Acquisition Regulation - Principal set of rules governing the federal government's purchasing process

NDA Requirements: Non-Disclosure Agreement provisions necessary for protecting confidential information during security assessment processes

SLA Requirements: Service Level Agreement specifications defining the level of service expected from the security assessment provider

ISO 27001/27002: International standards providing best practice recommendations for information security management

COBIT: Control Objectives for Information and Related Technologies - Framework for IT governance and management

CIS Controls: Center for Internet Security Controls - Set of actions for cyber defense providing specific ways to stop today's most pervasive attacks