Frameworks By country
United States
70 standards, regulations and schemes that apply in the United States. Each page explains what it is, who has to follow it, what to write down, and who checks it.
Written-policy obligations by business type and state are indexed for the United States only. See the US obligations index →
Sponsored
Policy Acknowledgment Proof
AcknowledgedPolicy set v3by name, on record
One Trail Every Borderwith AllyMatter
Cover the United States the Modern WayEvery standard on this page ends in a document someone has to read
01
Approve it, lock the version
Non-author approval, obsolete copies blocked
02
Every name on record
Who read which version, and when, wherever they sit
03
Hand the local assessor the trail
From $29/mo, 20 editors, unlimited staff (published)
United States
Quality & Manufacturing 6
21 CFR 111US Food and Drug Administration (FDA), Center for Food Safety and Appl21 CFR 117/FSMAUS Food and Drug Administration (FDA), under the FDA Food Safety Moder21 CFR 211US Food and Drug Administration (FDA), Center for Drug Evaluation and FDA 21 CFR 820/QMSRUS Food and Drug Administration (FDA), Center for Devices and RadiologNadcapPerformance Review Institute (PRI), on behalf of the Nadcap ManagementSQFSafe Quality Food Institute (SQFI), a division of FMI, the Food Indust
United States
Information Security & Privacy 8
CCPA/CPRAState of California; enforced by the California Privacy Protection AgeCMMC/NIST 800-171US Department of War (Department of Defense), Office of the DoD Chief FTC Safeguards/GLBAUS Federal Trade Commission, under Title V of the Gramm-Leach-Bliley AHIPAAUS Department of Health and Human Services, Office for Civil Rights (OHITRUSTHITRUST Alliance (HITRUST Services Corp.), a private company that ownsNIST CSFUS National Institute of Standards and Technology (NIST), Department oNY DFS 23 NYCRR 500New York State Department of Financial Services (NYDFS).SOC 2American Institute of Certified Public Accountants (AICPA), Assurance
United States
Healthcare & Human Services 17
42 CFR Part 2U.S. Department of Health and Human Services. The rule was issued joinACHC/CHAPACHC (Cary, North Carolina) and CHAP (Washington, DC), private nonprofARC-AMPECenters for Medicare & Medicaid Services (CMS), Center for Consumer InCARFCARF International (Commission on Accreditation of Rehabilitation FaciCLIACenters for Medicare & Medicaid Services (CMS), with CDC (standards anCMS ARSCenters for Medicare & Medicaid Services, Office of Information TechnoCMS Business AssessmentCenters for Medicare & Medicaid Services, Center for Consumer InformatCMS CoPsCenters for Medicare & Medicaid Services, under the Social Security AcCMS EDECenters for Medicare & Medicaid Services, Center for Consumer InformatCMS ProgramsCenters for Medicare & Medicaid Services, through its Office of InformDEA EPCSU.S. Drug Enforcement Administration, Diversion Control Division, undeJoint CommissionThe Joint Commission, Oakbrook Terrace, Illinois, a private nonprofit MARS-ECenters for Medicare & Medicaid Services, Center for Consumer InformatNCQANational Committee for Quality Assurance (NCQA), Washington, DC.NYS 405.46 Hospital CyberNew York State Department of Health, under 10 NYCRR 405.46 and Public OIG 7-element programU.S. Department of Health and Human Services, Office of Inspector GeneTEFCAHHS Assistant Secretary for Technology Policy / Office of the National
United States
Financial Services 7
AICPA SQMS No.1AICPA Auditing Standards Board (issued June 2022).BSA/AMLU.S. Department of the Treasury, Financial Crimes Enforcement Network FFIECFederal Financial Institutions Examination Council (Board of GovernorsFINRA 3110 WSPsFinancial Industry Regulatory Authority (FINRA), under SEC oversight.IRS WISP/Pub 4557Internal Revenue Service (Publications 4557 and 5708), building on theSEC 206(4)-7U.S. Securities and Exchange Commission, under the Investment AdvisersSOX ICFRU.S. Congress (Sarbanes-Oxley Act of 2002), implemented by the SEC (Ru
United States
Cloud & Government Authorization 4
United States
Defense, Supply Chain & NIST Catalogue 11
DFARSUS Department of Defense (recently styled Department of War in officiaDoD compliance requirementsUS Department of Defense (Department of War in current official usage)NIST IR 8286DNational Institute of Standards and Technology (NIST), US Department oNIST SP 800-161National Institute of Standards and Technology (NIST), US Department oNIST SP 800-218National Institute of Standards and Technology (NIST), US Department oNIST SP 800-30National Institute of Standards and Technology (NIST), US Department oNIST SP 800-34National Institute of Standards and Technology (NIST), US Department oNIST SP 800-37National Institute of Standards and Technology (NIST), US Department oNIST SP 800-39National Institute of Standards and Technology (NIST), US Department oNIST SP 800-53National Institute of Standards and Technology (NIST), US Department oNIST SP 800-61National Institute of Standards and Technology (NIST), US Department o
United States
Safety & Workforce 5
DOT/FMCSAUS Department of Transportation, Federal Motor Carrier Safety AdministEPA RCRAUS Environmental Protection Agency (EPA), Office of Resource ConservatISNetworld/AvettaISN Software Corporation (ISNetworld); Avetta, LLC (Avetta). Each hiriOSHA written programsUS Department of Labor, Occupational Safety and Health Administration State harassment-prevention mandatesState legislatures and agencies: New York State Department of Labor an
United States
AI Governance & Privacy Frameworks 5
CPSAUnknown. The only source for the label is a vendor services page. If iNIST AI RMFNational Institute of Standards and Technology (NIST), US Department oNIST Privacy FrameworkNational Institute of Standards and Technology (NIST), US Department oSLCPCI Security Standards Council (PCI SSC), if the label refers to the SUS State Privacy LawsIndividual state legislatures. Enforcement by state attorneys general;
United States
Trade, Ethics & Franchise 4
C-TPATUS Customs and Border Protection (CBP), Office of Field Operations, unFCPAUS Congress (15 U.S.C. §§ 78dd-1 et seq.), enforced by the US DepartmeFranchise brand standardsEach franchisor publishes and owns its own brand standards. The discloITARUS Department of State, Bureau of Political-Military Affairs, Director
Need a hand implementing it?
Find a Consultant Who Does This Work
Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.
From the publisher
Keep Your Written Policies in One Place
Whatever you are working toward, AllyMatter gets your policies approved, keeps every version and records who has read each one.
See how AllyMatter works ↗From $29/mo, 20 editors, unlimited staff