| NIST CSF 1.1 | International or National Standard | 38 | 61 | 23 |
| ISO/IEC 27001:2022 | International or National Standard | 30 | 10 | 4 |
| CIS Controls, V8 | Best Practice Guideline | 28 | 13 | 9 |
| EU General Data Protection Regulation (GDPR) | Regulation or Statute | 25 | 185 | 19 |
| ISO 27001-2013 | International or National Standard | 22 | 216 | 22 |
| PCI DSS v3.2.1 | Contractual Obligation | 20 | 8 | 4 |
| PCI DSS Defined Approach Requirements, Version 4.0 | International or National Standard | 18 | 8 | 4 |
| ISO/IEC 27002:2022 | International or National Standard | 17 | 10 | 10 |
| Sarbanes-Oxley Act of 2002 | Bill or Act | 16 | 5 | 6 |
| ISO/IEC 27017:2015(E) | Self-Regulatory Body Requirement | 15 | 23 | 11 |
| TSP Section 100: 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy | Self-Regulatory Body Requirement | 14 | 6 | 2 |
| 23 NYCRR 500 | Regulations | 13 | 1 | 1 |
| AICPA Trust Services | Audit Guideline | 13 | 6 | 1 |
| CIS Controls, V7.1 | Best Practice Guideline | 13 | 8 | 4 |
| ISO/IEC 27018:2019 | International or National Standard | 13 | 3 | 2 |
| NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations | International or National Standard | 13 | 15 | 8 |
| NIST SP 800-53 R5 | International or National Standard | 13 | 27 | 17 |
| ISO/IEC 27701:2019 | International or National Standard | 12 | 18 | 9 |
| AICPA Reporting on Controls at a Service Organization SOC-2 | Safe Harbor | 11 | 144 | 7 |
| FFIEC Information Technology Examination Handbook - Business Continuity Management | Audit Guideline | 11 | 20 | 5 |
| FFIEC IT Examination Handbook Architecture, Infrastructure, and Operations 2021 | Audit Guideline | 11 | 5 | 0 |
| Gramm Leach Bliley | Bill or Act | 11 | 3 | 0 |
| BSI Cloud Computing Compliance Controls Catalogue (C5) | Best Practice Guideline | 10 | 18 | 4 |
| FedRAMP Security Controls Baseline, 2018 | Audit Guideline | 10 | 1 | 4 |
| FFIEC CAT | Best Practice Guideline | 10 | 23 | 1 |
| FFIEC IT Examination Handbook | Audit Guideline | 10 | 22 | 2 |
| FFIEC Outsourcing Technology Services | Best Practice Guideline | 10 | 13 | 0 |
| FINRA Report on Cybersecurity Practices | Self-Regulatory Body Requirement | 10 | 9 | 1 |
| Hong Kong Monetary Authority: The Cyber Resilience Assessment Framework, 18 May 2016 | Best Practice Guideline | 10 | 3 | 0 |
| MAS-TRMG-2021 | Contractual Obligation | 10 | 7 | 0 |
| NFA Information Systems Security Programs | Self-Regulatory Body Requirement | 10 | 15 | 1 |
| NIST CSF 1.0 | International or National Standard | 10 | 12 | 2 |
| Notice on Cyber Hygiene | Bill or Act | 10 | 11 | 0 |
| UK Data Protection Act 2018 | Bill or Act | 10 | 20 | 0 |
| Australia Privacy Amendment Act | Regulation or Statute | 9 | 20 | 0 |
| Cloud Controls Matrix, v4.0 | Self-Regulatory Body Requirement | 9 | 5 | 0 |
| Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, High Impact Baseline, October 2020 | International or National Standard | 9 | 10 | 8 |
| Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 2020 | International or National Standard | 9 | 11 | 5 |
| COSO Enterprise Risk Management (2017) | Best Practice Guideline | 9 | 25 | 9 |
| COSO ERM | Safe Harbor | 9 | 11 | 8 |
| FFIEC Development Acquisition | Best Practice Guideline | 9 | 14 | 0 |
| HKMA General Principles for Technology Risk Management | Regulation or Statute | 9 | 28 | 0 |
| Hong Kong Personal Data (Privacy) Ordinance 2013 | Bill or Act | 9 | 8 | 0 |
| ISO 27002 | International or National Standard | 9 | 8 | 4 |
| MAS Guidelines on Outsourcing | Bill or Act | 9 | 1 | 0 |
| MAS TRM | Contractual Obligation | 9 | 48 | 0 |
| NIST SP 800-122 | International or National Standard | 9 | 22 | 9 |
| NIST SP 800-39 | International or National Standard | 9 | 19 | 6 |
| NIST SP 800-53 R4 | International or National Standard | 9 | 5 | 3 |
| NIST SP 800-53 Revision 5.1.1 | International or National Standard | 9 | 0 | 0 |
