About Infosec Standards
Discover which standards may apply, understand them in plain language, and find a clear path to help when you need it.
Infosec Standards helps organizations discover which information security and cybersecurity compliance standards may apply to them, and understand those standards in plain language the first time they face them.
Who this is for
This site is written for whoever your organization has tasked with compliance: often someone in IT, sometimes a dedicated compliance role, a founder, or legal. Whether you are discovering what applies, working toward attestation, or hiring outside help, the goal is to give you enough context to move forward.
It is not written for auditors deep in a framework, or for legal research. We link to primary sources rather than trying to replace them.
Who writes and edits it
Pages are drafted for a first-time reader and edited by practitioners at Aeris Secure. Published standard pages name the editors, with credentials and LinkedIn profiles, in an "Edited by" line under the title.
- Jeff Stiles, QSA, CISSP. Founder, Aeris Secure.
- Colin Doubek, CISSP. Practitioner, Aeris Secure.
- Garrett Stiles, CISSP. Practitioner, Aeris Secure.
Operated by Aeris Secure
This site is operated by Aeris Secure, a security audit and consulting firm. It is an educational reference first, not a brochure for Aeris Secure. When a page ends with a path to help, that inquiry comes here, to the same people who edit the content, not a separate marketing funnel.
How we write
Standard pages answer the same first-contact questions in the same order: what the standard is, who it applies to, who manages and enforces it, what it requires, how you prove compliance, what it costs, and what to do first. Decision-stage depth lives in child guides.
Editorial rules we hold ourselves to:
- News is the change feed. A news item is for a real change to a standard or program (a new version, a rule, an enforcement action, a suspension), traced to an official primary source. Major edits to a standard page ship with a tagged news item. Historical items added at launch are dated to the event and are not emailed.
- Cost ranges are sourced. Headline figures are external validation fees only, with named sources and a public cost methodology. They are directional, not a quote.
- Corrections. If something is wrong, email us from the contact form. We correct the page and, when the error would have changed a reader's next step, we note it in news.