Navigating PCI DSS: Understanding the Intent of the Requirements, PCI DSS v3.2.1
If you intend to do business with the United Kingdom (UK) Government, and you handle any aspect of personal and sensitive information, you cannot even bid without having completed Cyber Essentials certification. (More at http://www.cyberessentials.org/)
This article describes using a cybersecurity tool to tie out configuration requirements and the UK NCSC NOTICE Cyber Essentials has an update: National Cyber Security Center NCSC UK Announces Major Updates to Cyber Essentials
To effectively use this critical security content, you need to do two things; become a CIS member, (it costs nothing and offers tremendous value), and two, become a contributor and participant. (Please visit the source b/c this content needs a refresh)
Our SOC 2 program is current as of 2022. Some images may show AICPA SSAE 18 TSP Version 2016. AICPA is busy releasing SOC 2 for specific industries. Learn more by participating and staying current at the AICPA.