Leverage Zscaler to Achieve Compliance

CISA’s Zero Trust Maturity Model helps agencies develop zero trust strategies and implementation plans.

The DoW Zero Trust Strategy helps align strategies, efforts, and resources to accelerate adoption of zero trust.

NIST 800-53 addresses cloud security risks for a wide range of federal information systems, while FedRAMP applies to CSPs supporting federal agencies.

Controlled Unclassified Information (CUI) is government data that requires protection and controlled dissemination, but is not classified national security information.

International Traffic in Arms Regulations (ITAR) controlled data is information related to military technologies, defense, and national security.

Criminal Justice Information Services (CJIS) standards mandate how CJI (e.g., criminal records, fingerprints, arrest data) must be handled to ensure confidentiality, integrity, and availability.

IRS 1075 is intended to minimize the risk of loss, breach, or misuse of Federal Tax Information (FTI) held by external government agencies.

The Higher Education Cloud Vendor Assessment Toolkit (HECVAT) helps higher education institutions evaluate the security and privacy of cloud services from potential vendors.

The Gramm-Leach-Bliley Act (GLBA) mandates how financial institutions must protect the privacy and security of customers' non-public personal data as well as disclose their data sharing practices.

The Family Educational Rights and Privacy Act (FERPA) protects students' education records and privacy. It applies to most public and private schools as well as other federally funded institutions.

The Health Insurance Portability and Accountability Act (HIPAA) requires entities handling protected health information (PHI) to implement safeguards to ensure its privacy and confidentiality.

The Free Application for Federal Student Aid (FAFSA) is protected by laws and security measures to safeguard student data.

The Payment Card Industry Data Security Standard (PCI DSS) mandates how entities handling credit card data must store, process, and transmit cardholder data to protect against data breaches and fraud.

The Continuous Diagnostics and Mitigation (CDM) program provides tools, integration services, and dashboards to help continuously monitor and mitigate cyber risks across federal agencies.

CISA’s State and Local Cybersecurity Grant Program (SLGCP) program provides funding to help state, local, and tribal governments improve cybersecurity to address risks and threats to their critical infrastructure.

The K-12 Cybersecurity Pilot Program provides funding to help schools and libraries protect their networks and data from cyberthreats. The program is funded by telecommunication fees through the Universal Service Fund.