There's a Framework for Everything!
- Eva Vetter
- Jul 6
- 1 min read
If you ever visited an Identity Provider (IdP) site, you might encounter some impressive certifications similar to those offered by Okta:
But what do they signify and why are they important? I won't explore each one in detail, but Bitsight has an excellent blog on the topic, which I will summarize here for convenience. For the full reference, you can visit this link: https://www.bitsight.com/blog/7-cybersecurity-frameworks-to-reduce-cyber-risk
According to Bitsight, there are seven widely adopted frameworks:

In simple terms, these Security Frameworks represent best practices for organizations to reduce Cybersecurity risk and adhere to necessary standards.
NIST 2.0 - The gold standard for assessing cybersecurity maturity through identity, protect, detect, respond, recover, and govern
ISO 27001 & ISO 27002 - International standards for validating cybersecurity programs, whether in-house or vendor-provided
SOC2 - A trust and auditing standard to ensure data is securely managed
NERC-CIP - Focused on safeguarding North American infrastructure by identifying and mitigating risks through the supply chain
HIPAA - A standard for protecting electronic health information
GDPR - A standard for enhancing data protection procedures within the European Union (EU)
FISMA - Protects the federal government against cyber threats, whether in-house or vendor-provided
Were there any frameworks you were surprised to see omitted from this list? If you work in Cybersecurity, how do you prioritize these frameworks to ensure compliance across your organization?




Comments