Standards & Frameworks

Demonstrate privacy as a priority by certifying against the APEC CBPR, one of the major frameworks for data controllers.

NCC Group is one of only four Accountability Agents in the United States–and one of eight globally–that may perform a CBPR/Privacy Recognition for Processors (PRP) certification on US organizations working in coordination and under the enforcement authority of the Federal Trade Commission (FTC).

Stay up to date and prepare for compliance with the broad reforms proposed after review of Australia's Privacy Act 1988.

Identify where your organization's personally identifiable information (PII) and protected health information (PHI) is and take essential steps to secure it with our expert's guidance.

NCC Group is uniquely qualified to support your Centers for Medicare and Medicaid Services (CMS) audit requirements. Our suite of services includes advisory and/or auditing support for issuers, non-issuers, and web brokers for both Business Requirements audits as well as the Privacy and Security Audits.

Receive detailed controls assessment for multiple frameworks including – but not limited to – NIST 800-53 and ISO 27001.

Learn where good practices are in place, in terms of organizational teams, process and tech – and identify where improvements can be made to protect your organization.

Prepare for and comply with the Digital Operational Resilience Act (DORA), which applies to financial entities and critical third parties who partner to provide their ICT (Information Communication Technologies)-related services.

Ensure compliance on key areas including ICT risk-management, incident report, ICT third-party risk management, resilience testing and information sharing.

Reach Authority to Operate (ATO) and win government business with appropriate support for your Federal Risk and Authorization Management Program (FedRAMP) authorization from subject matter experts who know your technologies.

Today, half of all companies that are FedRAMP authorized are NCC Group clients. 

Ensure compliance with GSMA’s eSIM security and mobile communications technology framework.

Determine your organizational cyber security risk using The National Institute for Standards and Technology Cybersecurity Framework (NIST CSF) assessment.

NCC Group is an authorized External Assessor Organization and can support all of your HITRUST CSF assessment requirements. We provide advisory and certification assessments for HITRUST e1, i1 and r2 type assessment.

ISO22301 is a highly regarded standard for business continuity management and provides a proven, mature and effective mechanism for protecting your critical business functions using a risk-based approach.

Meet ISO 22301 compliance criteria and progress toward implementation and certification. Acquire support with all facets of the ISO 22301 process, from initial scoping and BCMS development through remediation and post-certification maintenance.

Achieve ISO 27001 implementation and certification with customized, step-by-step support. Receive expert advising through every stage of the ISO 27001 process, from initial scoping and ISMS development to remediation and post-certification maintenance.

Understand the implications and meet the requirements outlined in the amended Australian Security of Critical Infrastructure (SOCI) Act.

Our regional consultants provide expert support to those in defined critical infrastructure sectors covering the three main areas:

• Positive Security Obligation 
• Enhanced Cyber Security Obligations 
• Government Assistance 

Secure voluntary SOC 2 compliance by implementing customer privacy, security and confidentiality standards of the American Institute of CPAs (AICPA).

Draw on escrow support and services to comply with additional third-party regulatory standards.