Cyber, critical infrastructure & AI standards — all in one place.

The latest standards, laws and regulations, with curated metadata, mapped controls and expert guidance from 6clicks. Built for GRC, compliance and security teams.

Browse by industry

Browse by sector. Each page shows relevant standards, laws, regulations, and frameworks.

Explore all industries

Content Library

Showing 20 of 237

GRCGuideline

RG 207 — Regulatory Guide 207: Credit licensing: Financial requirements

RG 207 outlines the minimum expectations for Australian credit licensees to comply with the financial resource requirements under the National Consumer Credit Protection Act 2009. It provides guidance on how licensees should demonstrate adequate financial resources to ASIC during license application and annual compliance certification.

Australian Securities & Investments Commission (ASIC) • Australia

View details
GRCGuideline

RG 206 — Regulatory Guide 206: Credit licensing: Competence and training

Regulatory Guide 206 outlines the minimum expectations for credit licensees in demonstrating organisational competence as required by the National Credit Act. It covers compliance obligations related to qualifications, experience, training, and competence for individuals involved in credit activities.

Australian Securities and Investments Commission (ASIC) • Australia

View details
GRCGuideline

RG 273 — Regulatory Guide 273: Mortgage brokers: Best interests duty

RG 273 is a regulatory guide issued by ASIC that provides guidance for mortgage brokers and Australian credit licensees on complying with best interests obligations outlined in Part 3-5A of the National Consumer Credit Protection Act 2009. It includes steps to minimize the risk of non-compliance.

Australian Securities & Investments Commission (ASIC) • Australia • v2020

View details
CybersecurityStandard

WLA-SCS:2020 — World Lottery Association Security Control Standard 2020

The World Lottery Association Security Control Standard (WLA-SCS:2020) offers a framework specifically designed for the lottery and gaming industry to safeguard information security and ensure operational compliance. It includes guidelines for security management, risk assessments, and audit processes and provides a benchmark for organizations seeking WLA certification.

World Lottery Association • Global • v2020

View details
GRCGuideline

RG 210 — Regulatory Guide 210: Compensation and Insurance Arrangements for Credit Licensees

ASIC Regulatory Guide 210 outlines the compensation and insurance arrangements required for credit licensees in Australia. It primarily mandates professional indemnity insurance to ensure financial resources are available for consumer compensation claims.

Australian Securities and Investments Commission (ASIC) • Australia • vMarch 2010

View details
GRCGuideline

RG 209 — Regulatory Guide 209 Credit licensing: Responsible lending conduct

RG 209 is a regulatory guide issued by the Australian Securities & Investments Commission (ASIC). It outlines responsible lending obligations for credit licensees and applicants under Chapter 3 of the National Consumer Credit Protection Act 2009, providing steps to ensure compliance and reduce risks.

Australian Securities & Investments Commission (ASIC) • Australia • v2019

View details
PrivacyRegulation

CR code v2.1 — Privacy (Credit Reporting) Code 2014 (Version 2.1)

The Privacy (Credit Reporting) Code 2014 (Version 2.1) provides a framework for credit reporting practices under Australia's Privacy Act. It outlines obligations for Credit Reporting Bodies (CRBs), Credit Providers (CPs), and other affected entities to ensure compliance with privacy regulations.

Australian Government • Australia • v2.1

View details
GRCRegulation

NCCP Regulations — National Consumer Credit Protection Regulations 2010

This regulation provides detailed requirements under the National Consumer Credit Protection Act 2009 to govern the licensing, responsible lending, credit contracts, and compliance monitoring for entities providing credit services in Australia. It aims to ensure transparency and protection for consumers in financial and credit transactions.

Australian Government • Australia • v2021-12

View details
GRCStandard

ISO 31000 — ISO 31000:2018 Risk management — Guidelines

ISO 31000:2018 is an international standard providing principles and guidelines for risk management across organizations. It outlines processes for identifying, analyzing, evaluating, monitoring, and communicating risks, helping entities manage uncertainty proactively.

International Organization for Standardization (ISO) • v2018

View details
GRCLaw

SIS Act — Superannuation Industry (Supervision) Act 1993

The Superannuation Industry (Supervision) Act 1993 establishes the regulatory framework for superannuation funds in Australia. It defines compliance standards for trustees, funds, and associated entities, aiming to ensure proper administration and protection of member benefits.

Australian Government • Australia • vNo. 78, 1993

View details
PrivacyLaw

POPIA — Protection of Personal Information Act

The Protection of Personal Information Act (POPIA) is South African legislation that governs the lawful processing of personal information. It establishes principles and rights for data subjects, conditions for processing, obligations for responsible parties, and enforcement mechanisms.

Government of South Africa • South Africa

View details
Critical InfrastructureRegulation

EASA Part-IS — European Union Aviation Safety Agency (EASA) - Part IS - Easy Access Rules for Information Security

The EASA Part-IS Regulation mandates information security measures within the aviation sector to address digital threats that impact safety. It provides a framework for managing risks, responding to incidents, and safeguarding aviation systems.

European Union • EU • vDecember 2025

View details
PrivacyRegulation

FCA BCOBS — Banking: Conduct of Business Sourcebook (BCOBS)

The FCA's Banking: Conduct of Business Sourcebook (BCOBS) applies to firms accepting deposits from banking customers, focusing on protecting retail customers in banking and payment services. It includes key recordkeeping requirements, such as notifications of cancellation rights.

Financial Conduct Authority (FCA) • United Kingdom • vFebruary 2026

View details
PrivacyLaw

NCCP Act 2009 — National Consumer Credit Protection Act 2009

The National Consumer Credit Protection Act 2009 is an Australian law that regulates the provision of consumer credit and financial services in the country. It outlines licensing requirements for entities engaged in credit activities and includes protections for consumers against unsuitable credit agreements.

Australian Government • Australia • vNo. 134

View details
PrivacyLaw

LGOIMA — Local Government Official Information and Meetings Act 1987 - New Zealand

The Local Government Official Information and Meetings Act 1987 (LGOIMA) is a New Zealand law that provides public access to information held by local authorities and council-controlled organizations. It also sets transparency standards for local government meetings, ensuring public notification and accessibility.

New Zealand Government • New Zealand • v23 December 2023

View details
GRCLaw

CCA 2010 — Competition and Consumer Act 2010

The Competition and Consumer Act 2010 is a legislative act of the Australian Parliament that governs competition law and consumer protection in Australia. It is administered by the Australian Competition & Consumer Commission (ACCC) and aims to promote fair trading and prevent anti-competitive practices, while providing protections for consumers.

Australian Government • Australia • vCompilation No. 129

View details
GRCGuideline

RG 96 — Regulatory Guide 96: Debt Collection Guideline: For Collectors and Creditors

This guideline was jointly produced by the Australian Competition and Consumer Commission (ACCC) and the Australian Securities and Investments Commission (ASIC) to outline how Commonwealth consumer protection laws apply to debt collection. It applies to creditors and external agencies involved in debt collection, and provides guidance to debtors.

Australian Securities and Investments Commission (ASIC) • Australia • v13 April 2021

View details
CybersecurityGuideline

WA Digital Security Policy — Western Australia Digital Security Policy

The West Australian Whole of Government Digital Security Policy provides guidelines for adopting and maintaining security controls in digital information and systems. It addresses confidentiality, integrity, and availability, relying on both Australian and international standards.

Australian Government • Australia

View details
CybersecurityFramework

TGISF — Tasmanian Government Information Security Framework

The Tasmanian Government Information Security Framework (TGISF) is a government-wide information security and risk management framework that provides principles, guidelines, and controls to help Tasmanian Government agencies protect information assets and manage security risks effectively.

Tasmanian Government • Tasmania

View details
Critical InfrastructureGuideline

SMDDS — OWASP Secure Medical Devices Deployment Standard

The OWASP Secure Medical Devices Deployment Standard provides guidance for the secure deployment of medical devices within healthcare environments, addressing the rising threats such as botnets and malware targeting IoT devices. It emphasizes security measures across device purchasing, network security, interface controls, and incident handling.

OWASP

View details

Partner directory

Certified resellers, integrators and advisors to help you implement and manage your GRC program.

Explore all partners (88)

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks — automatically.

Book your strategy call