Industry norms and references

NIST, ISO, SANS, CIS Benchmarks List: Frameworks, tools, and guidelines for general cybersecurity and risk management.

ATT&CK from MITRE: Framework for understanding and mapping adversary behaviors and tactics.

MITRE D3FEND: Knowledge base of defensive techniques mapped in a structured framework.

Red Canary, OWASP: Reports, threat intelligence, and guides on current security trends, risks, and best practices.

GDPR, HIPPA, PCI DSS : Data protection.