DataBank

EU-US Data Privacy Framework

The United States ensures an adequate level of protection - comparable to that of the European Union - for personal data transferred from the EU to US companies under the new framework.

Federal Risk and Authorization Management Program

The Federal Risk and Authorization Management Program (FedRAMP) is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services.

Federal Information Security Management Act

FISMA 2014 codifies the Department of Homeland Security's role in administering the implementation of information security policies for federal Executive Branch civilian agencies, overseeing agencies' compliance with those policies, and assisting OMB in developing those policies.

Health Insurance Portability and Accountability Act

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law that required the creation of national standards to protect sensitive patient health information from being disclosed without the patient's consent or knowledge.

Health Information Technology for Economic and Clinical Health Act

The Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009 provides HHS with the authority to establish programs to improve health care quality, safety, and efficiency through the promotion of health IT, including electronic health records and private and secure electronic health information exchange.

International Standard for Standardization 14001

ISO 14001 is an internationally agreed standard that sets out the requirements for an environmental management system.

International Standard for Standardization 27001

ISO/IEC 27001 is the world's best-known standard for information security management systems (ISMS).

International Standard for Standardization 9001

ISO 9001 sets out the criteria for a quality management system. This standard is based on a number of quality management principles including a strong customer focus, the motivation and implication of top management, the process approach, and continual improvement.

Payment Card Industry Data Security Standard

The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard used to handle credit cards from major card brands.

Privacy Shield Framework

The Privacy Shield Principles lay out a set of requirements governing participating organizations' use and treatment of personal data received from the EU and Switzerland. By joining the Privacy Shield, participants make a commitment to comply with these Principles that is enforceable under U.S. law.

System and Organization Controls 1

System and Organization Controls 1, or SOC 1, aims to control objectives within a SOC 1 process area and documents internal controls relevant to an audit of a user entity's financial statements.

System and Organization Controls 2

SOC 2 is an auditing procedure that ensures your service providers securely manage your data to protect the interests of your organization and the privacy of its clients.

System and Organization Controls 3

A report that outlines information related to a service organization's internal controls for security, availability, processing integrity, confidentiality, and privacy.

Statement on Standards for Attestation Engagements No. 18

SSAE 18 is a standard established by the AICPA that enhances the quality and consistency of service organization control reports.