FedRAMP (Federal Risk and Authorization Management Program) is a U.S. government-wide initiative that provides a standardized framework for assessing, authorizing, and continuously monitoring the security of cloud services used by federal agencies
GRC – Governance Risk Compliance
Governance, Risk, and Compliance (GRC) is a comprehensive concept that describes the processes and policies designed for risk management, regulatory compliance, and information security protection within an organization.
AICPA – American Institute of Certified Public Accountants – SOC2
The American Institute of Certified Public Accountants (AICPA) SOC 2 (Service Organization Control 2) framework is a set of guidelines and requirements for service providers to demonstrate their ability to maintain a secure and reliable system for processing and storing customer data.
HIPAA – Health Insurance Portability and Accountability Act
The Health Insurance Portability and Accountability Act (HIPAA) is a United States federal law that was passed in 1996. HIPAA sets national standards for the protection of individuals? health information, including electronic health records (EHRs).
GDPR – General Data Protection Regulation
The General Data Protection Regulation (GDPR) is a comprehensive data protection framework that was introduced by the European Union (EU) in May 2018. The GDPR aims to provide individuals with greater control over their personal data, while also placing obligations on organizations that process personal data to ensure that they are handling it in a responsible and transparent manner.
