Within the US, SOC2 is the enterprise security compliance program of choice, although the reality is that ISOs, NIST, SOC2, HITRUST are largely overlapping. Bec

Within the US, SOC2 is the enterprise security compliance program of choice, although the reality is that ISOs, NIST, SOC2, HITRUST are largely overlapping. Because these security frameworks are already checklists, there aren't any tl;dr checklists that I know of. The closest thing is Comply: https://github.com/strongdm/comply https://github.com/strongdm/comply which has the rules for SOC2 and pre-written policy templates