Guidelines like NIST, ISO, and CIS to build secure systems

CIA Triad Model

Security Frameworks & Controls

NIST Frameworks

The Federal Energy Regulatory Commission - North American Electric Reliability Corporation (FERC-NERC)

The Federal Risk and Authorization Management Program (FedRAMP)

Center for Internet Security (CIS)

General Data Protection Regulation (GDPR)

Payment Card Industry Data Security Standard (PCI DSS)

The Health Insurance Portability and Accountability Act (HIPAA)

International Organization for Standardization (ISO)

System and Organizations Controls (SOC type 1, SOC type 2)

United States Presidential Executive Order 14028

OWASP (Open Web Application Security Project)