Cyber, critical infrastructure & AI standards — all in one place.
The latest standards, laws and regulations, with curated metadata, mapped controls and expert guidance from 6clicks. Built for GRC, compliance and security teams.
Browse by industry
Browse by sector. Each page shows relevant standards, laws, regulations, and frameworks.
Explore all industriesContent Library
Showing 20 of 31
AI-CAIQ — AI Consensus Assessments Initiative Questionnaire (AI-CAIQ)
The AI-CAIQ is a structured framework from the Cloud Security Alliance designed to help organizations self-assess compliance with AI-specific security, governance, privacy, and resilience controls. It builds on the widely adopted CAIQ for cloud security.
Cloud Security Alliance • Global • v1.1.0
DISP 2020 — Defence Industry Security Program (DISP)– Suitability Assessment (2020)
The Defence Industry Security Program (DISP) is an Australian Defence membership program that helps organizations implement and demonstrate appropriate security controls for participating in Defence projects and managing Defence-related information and assets.
Australian Department of Defence • Australia • v2020
DISP 2022 — Defence Industry Security Program – Suitability Requirements (2022)
The Defence Industry Security Program (DISP) is an Australian Defence security assurance program that helps organizations meet security requirements for Defence contracts and projects by implementing appropriate governance, personnel, physical, and information security controls.
Australian Government • Australia • v2022
Maine - An Act To Protect the Privacy of Online Customer Information
This law establishes privacy protections for broadband Internet access service customers in Maine. Providers are prohibited from using, disclosing, selling or allowing access to customer personal information unless explicit consent is given, with certain exceptions for service provision, emergency scenarios, and lawful orders. The law also mandates providers to adopt reasonable security measures for customer data and gives customers rights regarding consent and notification requirements.
Maine Legislature • Maine, USA
Thailand PDPA — Thailand Personal Data Protection Act B.E. 2562 (2019)
The Personal Data Protection Act B.E. 2562 (2019) is Thailand's primary law for personal data protection. It establishes rules for data collection, use, and disclosure, and aims to protect individuals' personal information and ensure effective remedies for violations.
Government of Thailand • Thailand • v27 May 2019
Spain ENS — Spain - National Security Framework
The National Security Framework (ENS) is Spain's national cybersecurity framework that defines security principles and controls for public sector organizations and their suppliers to protect information systems and ensure the confidentiality, integrity, availability, authenticity, and traceability of digital services.
Government of Spain • Spain • v5 May 2022
Dubai HDPR — Dubai Health Data Protection Regulation - DHCC Regulation No. 7 of 2013
The Dubai Health Data Protection Regulation is a healthcare privacy regulation that governs the protection, use, disclosure, and management of patient health information within Dubai Healthcare City, ensuring the confidentiality and security of health data.
Dubai Healthcare City Authority (DHCA) • Dubai • v21 October 2013
Copyright Act 1968
The Copyright Act 1968 is a foundational law in Australia governing copyrights and intellectual property rights in literary, artistic, dramatic, and musical works, as well as sound recordings, broadcasts, and published editions. It defines the rights and protections for creators and sets out provisions for infringement, fair dealing, and public access in specific scenarios such as education and disabilities.
Australian Government • Australia • vNo. 59, 18 December 2020
Child Support (Registration and Collection) Act 1988
The Child Support (Registration and Collection) Act 1988 sets the legal framework for registering and collecting child maintenance liabilities in Australia. It outlines processes for enforcing payments, managing registrable liabilities, and utilizing computer programs for certain decisions.
Australian Government • Australia • vNo. 61, 17 November 2016
Spam Act 2003
The Spam Act 2003 is an Australian law designed to regulate the sending of commercial electronic messages to ensure compliance with consent, sender identification, and unsubscribe requirements. It aims to prevent unsolicited messages and address harvesting practices.
Australian Government • Australia • vNo. 10, 10 March 2016
Environment Protection and Biodiversity Conservation Act 1999
The Environment Protection and Biodiversity Conservation Act 1999 (EPBC Act) is Australia's key environmental legislation. It provides a legal framework to protect and manage nationally and internationally significant flora, fauna, ecological communities, and heritage places.
Australian Government • Australia • vNo. 55, 16 December 2020
Dubai ISR — Dubai Government Information Security Regulation
The Dubai Government Information Security Regulation (ISR) provides standards to ensure the continuity of critical business processes and minimize information security risks for Dubai Government Entities. It defines minimum requirements for information security controls and aims to maintain confidentiality, integrity, and availability of government information.
Dubai Government • Dubai • v3
ASIC Act — Australian Securities and Investments Commission Act 2001
This Act establishes the legal framework for the operation of the Australian Securities and Investments Commission (ASIC), which is responsible for regulating company, financial services, and consumer protection laws in Australia. It outlines ASIC's powers, functions, and responsibilities while detailing provisions for consumer protection and fair competition in financial services industries.
Australian Government • Australia • vNo. 91, 1 July 2023
RG 206 — Regulatory Guide 206: Credit licensing: Competence and training
Regulatory Guide 206 outlines the minimum expectations for credit licensees in demonstrating organisational competence as required by the National Credit Act. It covers compliance obligations related to qualifications, experience, training, and competence for individuals involved in credit activities.
Australian Securities and Investments Commission (ASIC) • Australia
FCA BCOBS — Banking: Conduct of Business Sourcebook (BCOBS)
The FCA's Banking: Conduct of Business Sourcebook (BCOBS) applies to firms accepting deposits from banking customers, focusing on protecting retail customers in banking and payment services. It includes key recordkeeping requirements, such as notifications of cancellation rights.
Financial Conduct Authority (FCA) • United Kingdom • vFebruary 2026
CCA 2010 — Competition and Consumer Act 2010
The Competition and Consumer Act 2010 is a legislative act of the Australian Parliament that governs competition law and consumer protection in Australia. It is administered by the Australian Competition & Consumer Commission (ACCC) and aims to promote fair trading and prevent anti-competitive practices, while providing protections for consumers.
Australian Government • Australia • vCompilation No. 129
NIST AI RMF — NIST AI Risk Management Framework
The AI Risk Management Framework (AI RMF) is a voluntary framework developed by NIST to help organizations design, develop, use, and evaluate AI systems with trustworthiness considerations. It addresses governance, mapping, measuring, and managing AI risks.
National Institute of Standards and Technology (NIST) • United States • v1.0
CAIQ v4.1.0 — Consensus Assessment Initiative Questionnaire v4.1.0
The Consensus Assessments Initiative Questionnaire (CAIQ) v4.1.0 is a comprehensive cloud security assessment questionnaire developed by the Cloud Security Alliance (CSA) and aligned with the Cloud Controls Matrix (CCM) v4.1 to help organizations evaluate the security, privacy, and compliance practices of cloud service providers. It includes 261 assessment questions mapped to 207 controls across 17 security domains, supporting detailed vendor due diligence, third-party risk management, and cloud security assessments using a standardized industry framework.
Cloud Security Alliance (CSA) • v4.1.0
CAIQ Lite v4.1.0 — Consensus Assessments Initiative Questionnaire Lite v4.1.0
Consensus Assessments Initiative Questionnaire (CAIQ) Lite v4.1.0 is a streamlined cloud security assessment questionnaire developed by the Cloud Security Alliance (CSA) and aligned with the Cloud Controls Matrix (CCM) v4.1 to help organizations evaluate cloud service providers using a standardized approach. It includes 138 focused questions across 17 security domains, enabling efficient vendor due diligence, third-party risk management, and security posture assessments.
Cloud Security Alliance (CSA) • v4.1.0
NIST SP 800-53 Rev. 5.2 — Security and Privacy Controls for Information Systems and Organizations
NIST Special Publication 800-53 Rev. 5 provides a comprehensive catalog of security and privacy controls designed to safeguard organizational operations, assets, and individuals from a broad spectrum of risks including cyberattacks, human mistakes, and natural disasters. It is widely used for implementing security measures as part of risk management frameworks.
NIST (National Institute of Standards and Technology) • United States • v5.2.0
Partner directory
Certified resellers, integrators and advisors to help you implement and manage your GRC program.
1886 Consulting
- Region
- Australia
Tap into our knowledge of wealth.
Governance • Risk Management • Compliance Management • GRC Advisory
19eighty Advisory
- Region
- Australia
Business ownership is the most powerful calling.
3 Lights
- Region
- 4001, Brisbane, Australia
Finance & Professional Services, Healthcare, Technology & Telecommunications Energy & Utilities
ISO27001 • NIST • SMB1001
3Quotes
- Region
- Canada
Your IT Procurement Partner
A1 Hrvatska d.o.o.
- Region
- Croatia
Croatia's leading telecommunications provider offering mobile, internet, TV, and managed security services.
Managed Security Services • Security Operations • Cloud Security
Accenture
- Region
- Australia
De-risk tomorrow by infusing cybersecurity into strategy, resilience, and protection at global scale.
GRC Advisory • Risk Management • Compliance Management • Security Operations
AfterDark Technology
- Region
- Australia
ISO 27001-certified managed IT services provider keeping Australian businesses secure, reliable, and running.
IT Managed Services • Managed Security Services • Essential Eight • ISO 27001
Archer & Round
- Region
- Australia
Cybersecurity that keeps you one step ahead with 24/7 managed SOC, vCISO, and GRC services.
Managed Security Services • Governance • Risk Management • Incident Response
Ready to manage these frameworks?
6clicks maps regulations to controls, evidence and risks — automatically.