Cybersecurity buying researchSource publication dates are shown where established; undated product and job pages are observations at the cutoff. Vendor descriptions establish advertised scope, not independent performance.
- Defense CIO: About CMMC, including July 2026 Phase II suspension
- Defense CIO: CMMC FAQs, version 6 (13 July 2026)
- HHS: HIPAA Regulatory Initiatives — Security Rule NPRM
- OIRA: HIPAA Security Rule cybersecurity amendment, RIN 0945-AA22, long-term agenda
- HHS: Summary of the HIPAA Security Rule
- OIRA: Pending EO 12866 review, CIRCIA final rule received 1 October 2026
- CISA: CIRCIA Frequently Asked Questions
- SEC: Regulation S-P — Small Entity Compliance Guide
- SEC: Compliance Outreach on Regulation S-P for Small Firms (22 January 2026)
- NYDFS: Guidance on Cybersecurity Risk Assessments (10 September 2026)
- NYDFS: Cybersecurity Resource Center and 23 NYCRR Part 500
- FTC: Safeguards Rule notification requirement is now in effect (May 2024)
- FTC: Safeguards Rule — What Your Business Needs to Know
- SEC: Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure — Small Entity Compliance Guide
- PCI SSC: Just Published — PCI DSS v4.0.1 (June 2024)
- PCI SSC: Important Updates for Merchants Validating to SAQ A (January 2025)
Sources cited on this page
- Defense CIO: About CMMC, including July 2026 Phase II suspension ↗dodcio.defense.gov
- Defense CIO: CMMC FAQs, version 6 (13 July 2026) ↗dodcio.defense.gov
- HHS: HIPAA Regulatory Initiatives — Security Rule NPRM ↗hhs.gov
- OIRA: HIPAA Security Rule cybersecurity amendment, RIN 0945-AA22, long-term agenda ↗mobile.reginfo.gov
- HHS: Summary of the HIPAA Security Rule ↗hhs.gov
- OIRA: Pending EO 12866 review, CIRCIA final rule received 1 October 2026 ↗reginfo.gov
- CISA: CIRCIA Frequently Asked Questions ↗cisa.gov
- SEC: Regulation S-P — Small Entity Compliance Guide ↗sec.gov
- SEC: Compliance Outreach on Regulation S-P for Small Firms (22 January 2026) ↗sec.gov
- NYDFS: Guidance on Cybersecurity Risk Assessments (10 September 2026) ↗dfs.ny.gov
- NYDFS: Cybersecurity Resource Center and 23 NYCRR Part 500 ↗dfs.ny.gov
- FTC: Safeguards Rule notification requirement is now in effect (May 2024) ↗ftc.gov
- FTC: Safeguards Rule — What Your Business Needs to Know ↗ftc.gov
- SEC: Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure — Small Entity Compliance Guide ↗sec.gov
- PCI SSC: Just Published — PCI DSS v4.0.1 (June 2024) ↗blog.pcisecuritystandards.org
- PCI SSC: Important Updates for Merchants Validating to SAQ A (January 2025) ↗blog.pcisecuritystandards.org