Percy, the Reisen Cyber Institute papillon. Tap for a boop.

Grouped by who actually uses them

Standards Desk

Each sector is its own path. You can drill Payment Card Industry without finishing NIST. The desk is the Monday translation; the Lead tab is the quiz.

Public sector

US agencies, contractors, and anyone who has to brief in NIST language.

NIST CSF
New
NIST Cybersecurity Framework 2.0
Six verbs. One conversation the board can follow.

Enterprise

Global vendors and shops that need a certifiable management system.

ISO 27001
New
ISO/IEC 27001
The grown-up binder: scope, risk, controls, and proof you run the loop.

Lean shops

SMBs, MSPs, and four-person teams that need a punch list, not a catalog.

CIS Controls
New
CIS Critical Security Controls
Start with IG1. That is cyber hygiene, not a personality.

Payments

Merchants and processors who store, process, or transmit card data.

PCI DSS
New
PCI DSS
Twelve requirements. One question: where does card data actually live?

SaaS

Companies whose buyers ask for a SOC 2 before they sign.

SOC 2
New
SOC 2
Not a certificate on the wall. A report your customers’ auditors actually read.