Standards & Governance
Frameworks we assess and align against
We map every technical finding to recognized industrial and sector-specific standards so your leadership, auditors, and cyber insurers get clear, defensible documentation.
| Sector / Environment | Frameworks, Standards & Regulatory Guidance |
|---|---|
| All OT Environments | ISA/IEC 62443 (including 62443-2-4 for service providers), NIST CSF 2.0, NIST SP 800-82 Rev. 3, CISA Cross-Sector Cybersecurity Performance Goals (CPGs), MITRE ATT&CK for ICS |
| Healthcare & Medical Devices | HHS 405(d) Health Industry Cybersecurity Practices (HICP), HHS HPH Sector CPGs, HIPAA Security Rule, FDA Premarket Cybersecurity Guidance (FD&C Act Sec. 524B), IEC 81001-5-1 |
| Commercial Buildings & BAS | BACnet Secure Connect (BACnet/SC), UL 2900-2-2 & UL 2900-2-3, NIST SP 800-82 Building Systems Guidance |
| Food & Beverage Processing | ISA/IEC 62443, NIST CSF 2.0, CISA CPGs, and Cyber Insurance Underwriting Control Baselines |
| Water & Wastewater | AWIA Section 2013 Risk & Resilience Assessments, AWWA Cybersecurity Guidance, EPA Water Sector Guidance |
| Manufacturing (Defense Supply) | CMMC 2.0, NIST SP 800-171 Rev. 2/3, DFARS 252.204-7012 |
| Power, Energy, Pipeline & Rail | NERC CIP Reliability Standards, TSA Pipeline & Rail Security Directives |