>I always found it weird that there are a lot of security standards for other industries, OSHA, etc Can't speak for all, but look into things like the CISA[1].

>I always found it weird that there are a lot of security standards for other industries, OSHA, etc Can't speak for all, but look into things like the CISA[1]. I don't think they have much of legal authority over industries, perhaps in some deemed critical but not others, but to say there's no "standards" is a bit wrong. [1]: https://www.cisa.gov/ https://www.cisa.gov/