Center for Internet Security. (2025). CIS Critical Security Controls v8.1. https://www.cisecurity.org/controls/v8-1
NIST. (2020). Security and privacy controls for information systems and organizations (NIST SP 800-53 Rev. 5). https://doi.org/10.6028/NIST.SP.800-53r5
NIST. (2024). Protecting controlled unclassified information in nonfederal systems and organizations (NIST SP 800-171 Rev. 3). https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r3.pdf
OWASP. (2025). Application Security Verification Standard (ASVS). https://owasp.org/www-project-application-security-verification-standard/