United States
65 standards, regulations and schemes that apply in the United States. Each page explains what it is, who has to follow it, what to write down, and who checks it.
Written-policy obligations by business type and state are indexed for the United States only. See the US obligations index →
Share
Ad from the publisher
Policy Acknowledgment Proof
AcknowledgedPolicy set v3by name, on record
One Trail Every Borderwith AllyMatter
Cover the United States the Modern WayEvery standard on this page ends in a document someone has to read
01
Approve it, lock the version
Non-author approval, obsolete copies blocked
02
Every name on record
Who read which version, and when, wherever they sit
03
Hand the local assessor the trail
From $29/mo, 20 editors, unlimited staff (published)
Quality & Manufacturing 6
21 CFR 111US Food and Drug Administration (FDA), Center for Food Safety and Applied Nutrition21 CFR 117/FSMAUS Food and Drug Administration (FDA), under the FDA Food Safety Modernization Act of 201121 CFR 211US Food and Drug Administration (FDA), Center for Drug Evaluation and ResearchFDA 21 CFR 820/QMSRUS Food and Drug Administration (FDA), Center for Devices and Radiological HealthNadcapPerformance Review Institute (PRI), on behalf of the Nadcap Management Council made up of subscribing…SQFSafe Quality Food Institute (SQFI), a division of FMI, the Food Industry Association
Information Security & Privacy 8
CCPA/CPRAState of California; enforced by the California Privacy Protection Agency (CalPrivacy), which also writes the…CMMC/NIST 800-171US Department of War (Department of Defense), Office of the DoD Chief Information Officer, with the Cyber AB…FTC Safeguards/GLBAUS Federal Trade Commission, under Title V of the Gramm-Leach-Bliley Act.HIPAAUS Department of Health and Human Services, Office for Civil Rights (OCR), under HIPAA and the HITECH Act.HITRUSTHITRUST Alliance (HITRUST Services Corp.), a private company that owns the CSF and operates the certification…NIST CSFUS National Institute of Standards and Technology (NIST), Department of Commerce, published as NIST CSWP 29.NY DFS 23 NYCRR 500New York State Department of Financial Services (NYDFS).SOC 2American Institute of Certified Public Accountants (AICPA), Assurance Services Executive Committee (criteria)…
Healthcare & Human Services 15
42 CFR Part 2U.S. Department of Health and Human Services. The rule was issued jointly by SAMHSA and the Office for Civil…ACHC/CHAPACHC (Cary, North Carolina) and CHAP (Washington, DC), private nonprofit accreditors approved by CMS.ARC-AMPECenters for Medicare & Medicaid Services (CMS), Center for Consumer Information and Insurance Oversight and…CARFCARF International (Commission on Accreditation of Rehabilitation Facilities), Tucson, Arizona.CLIACenters for Medicare & Medicaid Services (CMS), with CDC (standards and technical guidance) and FDA (test…CMS ARSCenters for Medicare & Medicaid Services, Office of Information Technology, under the CMS Chief Information…CMS CoPsCenters for Medicare & Medicaid Services, under the Social Security Act; survey and enforcement procedures…CMS EDECenters for Medicare & Medicaid Services, Center for Consumer Information and Insurance Oversight (CCIIO)…DEA EPCSU.S. Drug Enforcement Administration, Diversion Control Division, under the Controlled Substances Act.Joint CommissionThe Joint Commission, Oakbrook Terrace, Illinois, a private nonprofit accreditor.MARS-ECenters for Medicare & Medicaid Services, Center for Consumer Information and Insurance Oversight, with the…NCQANational Committee for Quality Assurance (NCQA), Washington, DC.NYS 405.46 Hospital CyberNew York State Department of Health, under 10 NYCRR 405.46 and Public Health Law Article 28.OIG 7-element programU.S. Department of Health and Human Services, Office of Inspector General.TEFCAHHS Assistant Secretary for Technology Policy / Office of the National Coordinator for Health IT, with The…
Financial Services 7
AICPA SQMS No.1AICPA Auditing Standards Board (issued June 2022).BSA/AMLU.S. Department of the Treasury, Financial Crimes Enforcement Network (FinCEN). Examination is delegated to…FFIECFederal Financial Institutions Examination Council (Board of Governors of the Federal Reserve, FDIC, NCUA…FINRA 3110 WSPsFinancial Industry Regulatory Authority (FINRA), under SEC oversight.IRS WISP/Pub 4557Internal Revenue Service (Publications 4557 and 5708), building on the FTC Safeguards Rule issued by the…SEC 206(4)-7U.S. Securities and Exchange Commission, under the Investment Advisers Act of 1940.SOX ICFRU.S. Congress (Sarbanes-Oxley Act of 2002), implemented by the SEC (Rules 13a-15 and 15d-15, management…
Cloud & Government Authorization 4
CJISFBI Criminal Justice Information Services (CJIS) Division; changes are recommended by the CJIS Advisory…FedRAMPFedRAMP Program Management Office at the US General Services Administration (GSA), under OMB policy and the…StateRAMPStateRAMP, Inc., a 501(c)(6) nonprofit doing business as GovRAMP, governed by a board with government and…TX-RAMPTexas Department of Information Resources (DIR).
Assurance Reports 3
Defense, Supply Chain & NIST Catalog 11
DFARSUS Department of Defense (recently styled Department of War in official communications), through the Defense…DoD compliance requirementsUS Department of Defense (Department of War in current official usage) and its components: the Defense…NIST IR 8286DNational Institute of Standards and Technology (NIST), US Department of Commerce.NIST SP 800-161National Institute of Standards and Technology (NIST), US Department of Commerce.NIST SP 800-218National Institute of Standards and Technology (NIST), US Department of Commerce.NIST SP 800-30National Institute of Standards and Technology (NIST), US Department of Commerce, with the Joint Task Force…NIST SP 800-34National Institute of Standards and Technology (NIST), US Department of Commerce.NIST SP 800-37National Institute of Standards and Technology (NIST), US Department of Commerce, with the Joint Task Force.NIST SP 800-39National Institute of Standards and Technology (NIST), US Department of Commerce, with the Joint Task Force.NIST SP 800-53National Institute of Standards and Technology (NIST), US Department of Commerce, with the Joint Task Force.NIST SP 800-61National Institute of Standards and Technology (NIST), US Department of Commerce.
Safety & Workforce 5
DOT/FMCSAUS Department of Transportation, Federal Motor Carrier Safety Administration (FMCSA)EPA RCRAUS Environmental Protection Agency (EPA), Office of Resource Conservation and Recovery, with authorized state…ISNetworld/AvettaISN Software Corporation (ISNetworld); Avetta, LLC (Avetta). Each hiring client sets its own requirements…OSHA written programsUS Department of Labor, Occupational Safety and Health Administration (OSHA); 22 states and territories run…State harassment-prevention mandatesState legislatures and agencies: New York State Department of Labor and Division of Human Rights (Labor Law…
AI Governance & Privacy Frameworks 3
NIST AI RMFNational Institute of Standards and Technology (NIST), US Department of Commerce, under a mandate in the…NIST Privacy FrameworkNational Institute of Standards and Technology (NIST), US Department of Commerce.US State Privacy LawsIndividual state legislatures. Enforcement by state attorneys general; California additionally created the…
Trade, Ethics & Franchise 3
C-TPATUS Customs and Border Protection (CBP), Office of Field Operations, under the SAFE Port Act of 2006.FCPAUS Congress (15 U.S.C. §§ 78dd-1 et seq.), enforced by the US Department of Justice (Fraud Section, FCPA…ITARUS Department of State, Bureau of Political-Military Affairs, Directorate of Defense Trade Controls (DDTC)…
Need a hand implementing it?
Find a Consultant Who Does This Work
Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.
From the publisher
Keep Your Written Policies in One Place
Whatever you are working toward, AllyMatter gets your policies approved, keeps every version and records who has read each one.
See how AllyMatter works ↗From $29/mo, 20 editors, unlimited staff