Regulations

This section groups SBS controls by regulation and framework tags such as NIST, GDPR, and ISO 27001.

These mappings are indicative only. They help readers browse the benchmark through a compliance lens, but they do not replace a formal gap assessment or direct review of the underlying framework requirements.

Available Views

Regulation	Tagged Controls	Page
HIPAA	16	View page
GDPR	32	View page
NIST	28	View page
CCPA/CPRA	21	View page
SOC 2	33	View page
ISO 27001	50	View page

How To Use These Pages

• Use each regulation page as an index into the benchmark, not as a replacement for the benchmark pages.
• Each listed control links back to its canonical benchmark section.
• Untagged controls are intentionally excluded from these views.