Cyber, critical infrastructure & AI standards — all in one place.
The latest standards, laws and regulations, with curated metadata, mapped controls and expert guidance from 6clicks. Built for GRC, compliance and security teams.
Browse by industry
Browse by sector. Each page shows relevant standards, laws, regulations, and frameworks.
Explore all industriesContent Library
Showing 20 of 237
ITSG-33 — IT Security Risk Management: A Lifecycle Approach (ITSG-33)
ITSG-33 is a guideline developed by the Canadian Centre for Cyber Security to help government departments manage IT security risks effectively. It outlines activities at both departmental and project levels, providing a structured process for integrating security considerations into IT environments and maintaining authorization to operate.
Canadian Centre for Cyber Security • Canada
201 CMR 17.00 — Massachusetts: Standards for the protection of personal information of residents of the Commonwealth
201 CMR 17.00 is a Massachusetts information security regulation that establishes minimum requirements for protecting the personal information of Massachusetts residents through administrative, technical, and physical security safeguards.
Office of Consumer Affairs and Business Regulation • Massachusetts, USA
ASD Essentials for Cloud
The ASD Essentials for Cloud is an Australian cybersecurity framework that provides a threat-informed, risk-based approach for securing cloud environments, helping organizations protect cloud services, data, identities, applications, and integrations from cyber threats.
Australian Signals Directorate (ASD)
ASD Essentials for Operational Technology (OT)
The ASD Essentials for Operational Technology (OT) is an Australian cybersecurity framework that provides risk-based guidance for securing industrial control systems, cyber-physical systems, and other operational technology environments through prioritized security principles, actions, and domains tailored to OT-specific risks and operational requirements.
Australian Signals Directorate (ASD) • Australia
AICM v1.1 — AI Controls Matrix v1.1
The AI Controls Matrix v1.1 (AICM) is a vendor-agnostic framework for securing cloud-based AI systems. It consists of 247 control objectives across 18 security domains, mapping to standards like ISO 27001 and ISO 42001.
Cloud Security Alliance (CSA) • Global • v1.1
ASD Essentials for Enterprise IT
The ASD Essentials for Cloud is a cybersecurity framework developed by the Australian Signals Directorate (ASD) to help organizations protect cloud environments from sophisticated cyber threats. It provides a structured approach based on Principles, Actions, and Domains for securing SaaS and PaaS environments, with a focus on identity, data, configurations, applications, integrations, and provider assurance.
Australian Signals Directorate (ASD) • Australia
AI-CAIQ — AI Consensus Assessments Initiative Questionnaire (AI-CAIQ)
The AI-CAIQ is a structured framework from the Cloud Security Alliance designed to help organizations self-assess compliance with AI-specific security, governance, privacy, and resilience controls. It builds on the widely adopted CAIQ for cloud security.
Cloud Security Alliance • Global • v1.1.0
RFFR ISM PSP-A — RFFR ISM Provider Security Plan Annex Template
The RFFR Provider Security Plan Annex (PSP-A) Template is a DEWR security assurance template used to document the implementation and status of security controls that protect departmental information and support the secure delivery of services under the Right Fit For Risk (RFFR) framework.
Australian Government • Australia • vSeptember 2026
ISO 9001:2026 QMS Annex A — ISO 9001:2026 Quality Management Systems (QMS) Annex A
Annex A of ISO 9001:2026 offers supplemental guidance and explanatory information to support the practical interpretation and implementation of ISO 9001 quality management system requirements.
International Organization for Standardization (ISO) • Global • vEdition 6, 2026
National Principles of Child Safe Organisations
The National Principles for Child Safe Organisations outline ten core principles aimed at creating a child-safe culture within organisations that work with children. They provide a nationally consistent approach to promoting child safety and wellbeing.
Australian Government • Australia • v2025
ISO 9001:2026 QMS — ISO 9001:2026 Quality Management Systems (QMS)
ISO 9001:2026 Quality Management Systems (QMS) is an internationally recognized standard that specifies requirements for establishing, implementing, maintaining, and continually improving a quality management system. It helps organizations consistently deliver products and services that meet customer, regulatory, and stakeholder requirements while enhancing operational performance and customer satisfaction. Applicable to organizations of all sizes and sectors, ISO 9001:2026 promotes a process-based approach, risk management, continual improvement, and a strong focus on quality outcomes.
International Organization for Standardization (ISO) • Global • vEdition 6, 2026
NDIS Practice Standards and Quality Indicators v4
The NDIS Practice Standards and Quality Indicators v4 is Australia's quality and compliance framework for registered NDIS providers, defining the standards and quality indicators required to deliver safe, person-centred, and high-quality disability supports and services.
NDIS Quality and Safeguards Commission • Australia • v4
NDIS SIL Module — NDIS Supported Independent Living Module
The NDIS Supported Independent Living (SIL) Module is a supplementary NDIS Practice Standards module that sets quality and safety requirements for providers delivering Supported Independent Living services, ensuring participants receive person-centred supports that promote independence, choice, inclusion, and wellbeing.
NDIS Quality and Safeguards Commission • Australia
CCC-2: 2024 — Cloud Cybersecurity Controls
The Cloud Cybersecurity Controls (CCC – 2: 2024) define minimum cybersecurity requirements for cloud computing services used by Cloud Service Providers (CSPs) and Cloud Service Tenants (CSTs) in Saudi Arabia. The controls aim to enhance national cybersecurity goals and mitigate cyber risks.
National Cybersecurity Authority (NCA) • Saudi Arabia • v2: 2024
OTCC-1:2022 — Operational Technology Cybersecurity Controls
The Operational Technology Cybersecurity Controls (OTCC-1:2022), developed by Saudi Arabia’s National Cybersecurity Authority (NCA), establish minimum cybersecurity requirements for Operational Technology (OT) and Industrial Control Systems (ICS) environments. The framework aims to protect critical infrastructure from cyber threats and enhance operational resilience, safety, and security. OTCC consists of 4 domains, 23 subdomains, 47 controls, and 122 sub-controls, with requirements categorized across three control levels (L1, L2, and L3) based on facility criticality and risk.
National Cybersecurity Authority (NCA) • Saudi Arabia • v2022
ESMA Minimum Standard IT Security Controls
The ESMA Minimum Standard IT Security Controls is a cybersecurity and compliance framework that defines the minimum security requirements service providers must implement to protect ESMA systems, applications, data, and information services.
European Securities and Markets Authority (ESMA) • EU
Croatia - Personal Data Protection Act
The Act governs the implementation of the EU General Data Protection Regulation (GDPR) in Croatia. It outlines specific roles such as the responsibilities of the supervisory authority, the Croatian Data Protection Agency (AZOP), and sets additional national measures related to GDPR compliance.
Government of Croatia • Croatia
Maine Notice of Risk to Personal Data — Title 10, Chapter 210-B: Notice of Risk to Personal Data
Maine's Title 10, Chapter 210-B establishes regulations around personal data protection and security breach notifications. It includes provisions on prohibited use of personal data, mandatory breach notification, enforcement mechanisms, and rules for reporting identity theft.
State of Maine • Maine, USA
France Act no. 78-17 of 6 January 1978 — Act no. 78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties
This French law governs the protection of personal data and the rights of individuals in relation to data processing. It sets principles for the use of information technology to ensure it serves citizens without violating human rights, privacy, or individual liberties.
Government of France • France
COBIT 5 — COBIT 5
COBIT 5 is a comprehensive framework for the governance and management of enterprise IT, designed to maximize the value organizations derive from their information systems. It incorporates principles, practices, and tools to align IT with business strategies and goals.
ISACA • Global • v5
Partner directory
Certified resellers, integrators and advisors to help you implement and manage your GRC program.
1886 Consulting
- Region
- Australia
Tap into our knowledge of wealth.
Governance • Risk Management • Compliance Management • GRC Advisory
19eighty Advisory
- Region
- Australia
Business ownership is the most powerful calling.
3 Lights
- Region
- 4001, Brisbane, Australia
Finance & Professional Services, Healthcare, Technology & Telecommunications Energy & Utilities
ISO27001 • NIST • SMB1001
3Quotes
- Region
- Canada
Your IT Procurement Partner
A1 Hrvatska d.o.o.
- Region
- Croatia
Croatia's leading telecommunications provider offering mobile, internet, TV, and managed security services.
Managed Security Services • Security Operations • Cloud Security
Accenture
- Region
- Australia
De-risk tomorrow by infusing cybersecurity into strategy, resilience, and protection at global scale.
GRC Advisory • Risk Management • Compliance Management • Security Operations
AfterDark Technology
- Region
- Australia
ISO 27001-certified managed IT services provider keeping Australian businesses secure, reliable, and running.
IT Managed Services • Managed Security Services • Essential Eight • ISO 27001
Archer & Round
- Region
- Australia
Cybersecurity that keeps you one step ahead with 24/7 managed SOC, vCISO, and GRC services.
Managed Security Services • Governance • Risk Management • Incident Response
Ready to manage these frameworks?
6clicks maps regulations to controls, evidence and risks — automatically.