What is ISO 9001? ISO 9001 is recognized globally as the standard for Quality Management Systems (QMS). Its full name is ISO 9001:2015, indicating the most recent revision published in 2015 by the International Organization for Standardization (ISO). This framework is relevant to any organization, regardless of its size, industry, ... Read More

What is the Personal Data Protection Act (PDPA) of Thailand? The Personal Data Protection Act, B.E. 2562 (2019), often referred to by its acronym, PDPA, is Thailand’s comprehensive data privacy and protection law. Enacted to safeguard the personal data of individuals, it is heavily influenced by international privacy standards, most ... Read More

What is the CAIF? The Centraleyes AI Framework (CAIF) is a comprehensive compliance and governance tool designed to help organizations meet the diverse and rapidly evolving regulatory requirements surrounding artificial intelligence. It consolidates questions and controls from multiple AI laws and regulatory regimes across the globe – including the EU ... Read More

What is Turkey’s Personal Data Protection Law (KVKK)? The Personal Data Protection Law (KVKK), or Kişisel Verileri Koruma Kanunu in Turkish, is Turkey’s primary data privacy law. It came into force on April 7, 2016, and is largely based on the EU’s former Data Protection Directive 95/46/EC, with significant similarities ... Read More

What is the Data Privacy Act (DPA)? The Philippines Data Privacy Act of 2012 (Republic Act No. 10173), commonly referred to as the DPA, is the country’s primary data protection law. Enacted in August 2012, the Act was designed to safeguard the fundamental right to privacy of every Filipino while ... Read More

The Indiana Data Protection Act (IDPA) is a state-level privacy law designed to protect the personal data of Indiana residents. Modeled after similar data protection laws across the United States, the IDPA establishes clear guidelines for businesses on the collection, processing, and sharing of personal information. Its primary goal is ... Read More

What is NIST CSF 2.0 Critical? NIST CSF CRITICAL is a custom cybersecurity framework designed to streamline and enhance the implementation of the NIST Cybersecurity Framework (CSF) by utilizing the most relevant controls from NIST 800-53 and aligning them with the best practices established by the Center for Internet Security ... Read More

What is the Oregon Consumer Privacy Act? The Oregon Consumer Privacy Act (OCPA) is a state privacy law that sets guidelines for how businesses should collect, use, and protect the personal data of Oregon residents. Signed into law in 2023, OCPA aims to strengthen individual privacy rights and establish clear ... Read More

What is a Compliance Report? A compliance report describes how successfully or poorly a company complies with security and business-related regulations. It is distributed to various audiences, including the board, senior executives, regulators, business partners, third-party vendors, etc. Whatever compliance requirements a company may already have, a good rule of ... Read More

What is the Utah Consumer Privacy Act? The Utah Consumer Privacy Act, or UCPA, is a state-level data privacy law enacted in Utah, USA, aimed at providing residents with greater control over their personal data. The UCPA shares similarities with other state privacy laws like the California Consumer Privacy Act ... Read More