+1 (888) 966-7228
ATTACK?
WOM Technology Management Group

Which Compliance Frameworks Apply to Your Business?

Answer five questions about your business and get a personalized list of the compliance frameworks that likely apply - each linked to a plain-English explanation of what it regulates and what it requires from your IT.

This tool provides general educational guidance, not legal advice. Applicability depends on facts a five-question tool can't capture - the assessment can.

What industry are you in?

Pick the closest match. If you span several, pick the one that produces most of your revenue - the assessment can cover the rest.

What kinds of data do you handle?

Choose everything you touch, even occasionally. Storing, processing, or transmitting it for someone else counts - you don't have to own the data for the rules to reach you.

Where do you operate or serve customers?

Select every place you have customers, employees, or users - not just where your office is. United States is preselected; leave it checked if that's you.

Do you hold or bid on government contracts?

Include subcontracts and flow-downs - the cybersecurity clauses follow the work down the supply chain, not just prime contracts.

Do you accept card payments?

How the card is taken changes which standards apply, so answer for every way you take payment - a terminal at the counter counts, and so does a payment page.

The 38 Frameworks This Tool Covers

Critical infrastructure & OT (2)

Security frameworks & governance (4)

Questions people ask

Is this legal advice?

No. The finder is educational guidance built from each framework's published applicability criteria. It tells you what to read, not what the law requires of you specifically. Requirements change and applicability depends on your circumstances - for specific compliance concerns, consult a qualified legal professional.

How accurate are the results?

The mapping is deterministic: the same answers always produce the same list, drawn from each framework's own applicability criteria - the data it regulates, who it binds, and where it applies. What five questions can't capture are thresholds, exemptions, and contract terms - CCPA's revenue floor, the FTC Safeguards small-business carve-out, whether your government work actually touches controlled information. That's why every result carries a caveat, and why the list is a reading list, not a ruling.

Do I need to give you my email?

No. Your results appear on this page, ungated, and stay shareable by link. The email field exists for one reason: sending yourself a copy.

What happens to my answers?

They stay in your browser. The finder runs entirely on this page - no account, no server, nothing stored. If you email yourself the results, we receive the address and the list you sent, and nothing else.

The information provided here is for educational purposes only and should not be considered legal advice. Requirements change and applicability depends on your specific circumstances - for specific compliance concerns, consult a qualified legal professional.

Get the clarity you need to manage risk with confidence.

Your journey starts with understanding your gaps. We'll walk you through what matters, what's required, and what's next - so you can make confident decisions that protect your business.

Start My Cyber Risk & Compliance Gap Assessment

No pressure. No jargon. Just clear insights and your best next steps.