Title: Review organizational security posture.
Course: Cybersecurity Operations, Advanced (10302-III) > Section: Understanding Governance, Risk, Ethics, and Compliance

Review should include

- regulations, standards, and legislation associated with
  - general data protection regulation
  - national, territorial, or state laws
  - payment card industry data
  - Payment Card Industry Data Security Standard (PCI DSS)

- key frameworks
  - Center for Internet Security (CIS) (https://www.cisecurity.org/)
  - National Institute of Standards and Technology (NIST) (https://www.nist.gov/)
  - International Organization for Standardization (ISO) (https://www.iso.org/home.html)
  - Statement on Standards for Attestation Engagements (SSAE) 16 SOC 2 Type I and II
  - Cloud Security Alliance (CSA) https://cloudsecurityalliance.org/

- benchmarks and secure configuration guides
  - platform or vendor specific guides
    - web server
    - OS
    - application server
    - network infrastructure devices.