SBA Edge

Health Insurance Portability and Accountability Act

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law that required the creation of national standards to protect sensitive patient health information from being disclosed without the patient's consent or knowledge.

International Standard for Standardization 27001

ISO/IEC 27001 is the world's best-known standard for information security management systems (ISMS).

Payment Card Industry Data Security Standard

The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard used to handle credit cards from major card brands.

System and Organization Controls 1 Type 2

Report on the fairness of the presentation of management's description of the service organization's system and the suitability of the design and operating effectiveness of the controls to achieve the related control objectives included in the description throughout a specified period.

System and Organization Controls 2 Type 2

SOC 2 Type 2 compliance evaluates an organization's cybersecurity controls over a period of time.

Statement on Standards for Attestation Engagements 18

SSAE 18 updates SSAE 16 and introduces enhanced requirements for risk assessment, subservice organization monitoring, and vendor management. It is the standard used to produce SOC reports.