{"count":80,"description":"Master index of compliance frameworks and official documentation for healthcare, biotech, research, cybersecurity, and regulated industries. Curated by Kief Studio for humans, search engines, and AI agents.","frameworks":[{"agencies":["SAMHSA","HHS"],"description":"Evaluate compliance with federal regulations protecting confidentiality of substance use disorder patient records","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.samhsa.gov/about-us/who-we-are/laws-regulations/confidentiality-regulations-faqs","sectors":["Healthcare","Cannabis"],"shortName":"42 CFR Part 2","slug":"42-cfr-part-2","title":"42 CFR Part 2 Compliance Assessment","url":"https://myrhc.com/frameworks/42-cfr-part-2/"},{"agencies":["SAE","IAQG"],"description":"Evaluate AS9100D aerospace quality management system compliance, building on ISO 9001 with aerospace-specific requirements for safety, reliability, and regulatory compliance","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.sae.org/standards/content/as9100d/","sectors":["Quality Management","Aerospace","Defense","Medtech"],"shortName":"AS9100","slug":"as9100","title":"AS9100 Aerospace Quality Management","url":"https://myrhc.com/frameworks/as9100/"},{"agencies":[],"description":"Evaluate compliance with NCI Best Practices and ISBER guidelines for biospecimen collection, processing, storage, and distribution in research biobanks","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://biospecimens.cancer.gov/bestpractices/","sectors":["Clinical Research","Biotech \u0026 Life Sciences","Healthcare","Research"],"shortName":"Biospecimens","slug":"biospecimen-management","title":"Biospecimen Management Best Practices","url":"https://myrhc.com/frameworks/biospecimen-management/"},{"agencies":["CDC","NIH"],"description":"Evaluate compliance with CDC/NIH Biosafety in Microbiological and Biomedical Laboratories guidelines for safe handling of infectious agents","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.cdc.gov/labs/bmbl/index.html","sectors":["Clinical Research","Research","Biotech \u0026 Life Sciences","Healthcare"],"shortName":"BMBL","slug":"bmbl","title":"BMBL Biosafety Assessment","url":"https://myrhc.com/frameworks/bmbl/"},{"agencies":["California"],"description":"Evaluate compliance with California Confidentiality of Medical Information Act (Civil Code §56-56.37), covering patient authorization, disclosure limits, and medical information security","jurisdictions":["California","US"],"last_verified":"2026-07-28","official_url":"https://leginfo.legislature.ca.gov/faces/codes_displayexpandedbranch.xhtml?tocCode=CIV\u0026division=1.\u0026title=\u0026part=2.6.\u0026chapter=\u0026article=","sectors":["State Regulations","Healthcare","Biotech \u0026 Life Sciences","Research"],"shortName":"CA CMIA","slug":"ca-cmia","title":"CA CMIA Medical Privacy Compliance","url":"https://myrhc.com/frameworks/ca-cmia/"},{"agencies":[],"description":"Evaluate compliance with physical security, surveillance, and access control requirements for cannabis cultivation, manufacturing, and retail facilities","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://masscannabiscontrol.com/documents/","sectors":["Cannabis"],"shortName":"Security","slug":"cannabis-security","title":"Cannabis Facility Security Requirements","url":"https://myrhc.com/frameworks/cannabis-security/"},{"agencies":[],"description":"Evaluate compliance with ISO/IEC 17025:2017 requirements for cannabis testing laboratories performing potency, contaminant, and safety testing","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://masscannabiscontrol.com/documents/","sectors":["Cannabis"],"shortName":"Lab Testing","slug":"cannabis-lab-testing","title":"Cannabis Testing Lab ISO 17025 Compliance","url":"https://myrhc.com/frameworks/cannabis-lab-testing/"},{"agencies":["CAP"],"description":"Assessment for College of American Pathologists (CAP) laboratory accreditation standards for clinical diagnostic laboratories","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.cap.org/laboratory-improvement/accreditation","sectors":["Lab Accreditation","Healthcare","Clinical Lab","Pathology","Diagnostics"],"shortName":"CAP Laboratory Accreditation","slug":"cap-accreditation","title":"CAP Laboratory Accreditation","url":"https://myrhc.com/frameworks/cap-accreditation/"},{"agencies":["California AG"],"description":"Evaluate compliance with California Consumer Privacy Act and California Privacy Rights Act requirements for businesses handling California resident data","jurisdictions":["California","US"],"last_verified":"2026-07-28","official_url":"https://oag.ca.gov/privacy/ccpa","sectors":["Data Privacy","Biotech \u0026 Life Sciences","Healthcare","Research","Cannabis"],"shortName":"CCPA","slug":"ccpa","title":"CCPA/CPRA Compliance Assessment","url":"https://myrhc.com/frameworks/ccpa/"},{"agencies":["CMS","CDC"],"description":"Evaluate compliance with Clinical Laboratory Improvement Amendments for laboratory quality and patient safety","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.cms.gov/medicare/quality/clinical-laboratory-improvement-amendments","sectors":["Clinical Research","Healthcare","Research","Biotech \u0026 Life Sciences"],"shortName":"CLIA","slug":"clia","title":"CLIA Compliance Assessment","url":"https://myrhc.com/frameworks/clia/"},{"agencies":["CMS"],"description":"Assessment for Medicare Coverage Analysis and billing compliance for clinical trial services separating research costs from standard care","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.cms.gov/medicare/coverage/clinical-trial-policies","sectors":["Clinical Trials Billing","Research","Healthcare","Clinical Trials","Biotech \u0026 Life Sciences"],"shortName":"Clinical Trials Billing Compliance","slug":"clinical-trials-billing","title":"Clinical Trials Billing Compliance","url":"https://myrhc.com/frameworks/clinical-trials-billing/"},{"agencies":["NIH"],"description":"Assessment for research conflicts of interest management, financial disclosure requirements, and institutional COI policies per PHS and NSF regulations","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://grants.nih.gov/grants/policy/coi/index.htm","sectors":["Research Integrity","Research","University","Biotech \u0026 Life Sciences","Pharma"],"shortName":"Conflicts of Interest \u0026 Financial Disclosure","slug":"conflicts-of-interest","title":"Conflicts of Interest \u0026 Financial Disclosure","url":"https://myrhc.com/frameworks/conflicts-of-interest/"},{"agencies":["FDA"],"description":"Assessment for pharmaceutical contract manufacturing organizations covering cGMP compliance, quality agreements, and third-party oversight","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.fda.gov/drugs/pharmaceutical-quality-resources/current-good-manufacturing-practice-cgmp-regulations","sectors":["Contract Manufacturing","Pharma","Biotech \u0026 Life Sciences","Medtech"],"shortName":"Contract Manufacturing (cGMP CMO) Compliance","slug":"cmo-compliance","title":"Contract Manufacturing (cGMP CMO) Compliance","url":"https://myrhc.com/frameworks/cmo-compliance/"},{"agencies":[],"description":"Evaluate readiness for cyber liability insurance coverage by assessing security controls, incident response, and risk management practices that insurers require","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.cisa.gov/cybersecurity-insurance","sectors":["Insurance","All","Technology","Healthcare","Biotech \u0026 Life Sciences","Finance"],"shortName":"Cyber Insurance","slug":"cyber-insurance","title":"Cyber Insurance Readiness Assessment","url":"https://myrhc.com/frameworks/cyber-insurance/"},{"agencies":["HHS"],"description":"Assessment for records management, data retention policies, and secure destruction procedures for regulated industries","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html","sectors":["Data Management","Healthcare","Research","Biotech \u0026 Life Sciences","Pharma","All"],"shortName":"Data Retention \u0026 Secure Destruction","slug":"data-retention","title":"Data Retention \u0026 Secure Destruction","url":"https://myrhc.com/frameworks/data-retention/"},{"agencies":["DOL"],"description":"Evaluate federal employment law compliance covering FMLA, ADA, EEOC, FLSA, wage/hour, and workplace rights","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.dol.gov/","sectors":["HR \u0026 Employment","All"],"shortName":"Employment Law","slug":"employment-law","title":"Employment Law Compliance Assessment","url":"https://myrhc.com/frameworks/employment-law/"},{"agencies":[],"description":"Evaluate Resource Conservation and Recovery Act (RCRA) compliance for research and biotech labs generating hazardous waste, covering waste identification, generator requirements, and disposal","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.epa.gov/hw","sectors":["Lab Safety","Biotech \u0026 Life Sciences","Research","Healthcare","Pharma"],"shortName":"EPA RCRA","slug":"epa-hazardous-waste","title":"EPA Hazardous Waste Management (RCRA)","url":"https://myrhc.com/frameworks/epa-hazardous-waste/"},{"agencies":["EPA"],"description":"Evaluate Resource Conservation and Recovery Act compliance for hazardous waste generation, storage, treatment, and disposal in laboratory and manufacturing environments","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.epa.gov/rcra","sectors":["Environmental","Biotech \u0026 Life Sciences","Pharma","Research","Manufacturing"],"shortName":"EPA RCRA","slug":"epa-rcra","title":"EPA RCRA Hazardous Waste Compliance","url":"https://myrhc.com/frameworks/epa-rcra/"},{"agencies":[],"description":"Evaluate readiness for ESG (Environmental, Social, Governance) and sustainability reporting per GRI, SASB, CDP, and TCFD frameworks","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.globalreporting.org/standards/","sectors":["Environmental","All","Biotech \u0026 Life Sciences","Pharma","Manufacturing","Technology"],"shortName":"ESG Reporting","slug":"sustainability-reporting","title":"ESG \u0026 Sustainability Reporting Readiness","url":"https://myrhc.com/frameworks/sustainability-reporting/"},{"agencies":["European Commission"],"description":"Evaluate compliance with EU Artificial Intelligence Act for high-risk AI systems, covering risk management, data governance, transparency, human oversight, and conformity assessment","jurisdictions":["EU"],"last_verified":"2026-07-28","official_url":"https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai","sectors":["AI \u0026 Machine Learning","Technology","Medtech","Healthcare","All"],"shortName":"EU AI Act","slug":"eu-ai-act","title":"EU AI Act Compliance Assessment","url":"https://myrhc.com/frameworks/eu-ai-act/"},{"agencies":["European Commission"],"description":"Evaluate compliance with European In Vitro Diagnostic Regulation 2017/746 for diagnostic tests, companion diagnostics, and laboratory-developed tests (LDTs)","jurisdictions":["EU"],"last_verified":"2026-07-28","official_url":"https://health.ec.europa.eu/medical-devices-sector/new-regulations_en","sectors":["Medical Device","Medtech","Biotech \u0026 Life Sciences","Healthcare","Research"],"shortName":"IVDR","slug":"ivdr","title":"EU IVDR 2017/746 - IVD Compliance Assessment","url":"https://myrhc.com/frameworks/ivdr/"},{"agencies":["European Commission"],"description":"Evaluate compliance with European Medical Device Regulation 2017/745 covering device classification, quality management, clinical evaluation, post-market surveillance, and vigilance","jurisdictions":["EU"],"last_verified":"2026-07-28","official_url":"https://health.ec.europa.eu/medical-devices-sector/new-regulations_en","sectors":["Medical Device","Medtech","Healthcare","Biotech \u0026 Life Sciences"],"shortName":"EU MDR","slug":"eu-mdr","title":"EU MDR 2017/745 Compliance Assessment","url":"https://myrhc.com/frameworks/eu-mdr/"},{"agencies":["BIS","Commerce"],"description":"Assessment for EAR/ITAR compliance, deemed export controls, and research security for organizations with foreign national access or international collaborations","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.bis.doc.gov/","sectors":["Export Control","Research","Biotech \u0026 Life Sciences","Medtech","University"],"shortName":"Export Control \u0026 ITAR Compliance","slug":"export-control","title":"Export Control \u0026 ITAR Compliance","url":"https://myrhc.com/frameworks/export-control/"},{"agencies":["FDA"],"description":"Evaluate compliance with FDA 21 CFR Part 11 requirements for electronic records and electronic signatures in FDA-regulated industries","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.fda.gov/regulatory-information/search-fda-guidance-documents/part-11-electronic-records-electronic-signatures-scope-and-application","sectors":["Healthcare","Biotech \u0026 Life Sciences"],"shortName":"FDA Part 11","slug":"fda-part-11","title":"FDA 21 CFR Part 11 Electronic Records Compliance","url":"https://myrhc.com/frameworks/fda-part-11/"},{"agencies":["FDA"],"description":"Evaluate compliance with FDA Quality System Regulation for medical device manufacturers - the U.S. equivalent of ISO 13485","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.fda.gov/medical-devices/postmarket-requirements-devices/quality-system-qs-regulationmedical-device-good-manufacturing-practices","sectors":["Medical Device","Biotech \u0026 Life Sciences","Healthcare"],"shortName":"FDA 820","slug":"fda-820","title":"FDA 21 CFR Part 820 QSR Assessment","url":"https://myrhc.com/frameworks/fda-820/"},{"agencies":["FDA"],"description":"Evaluate FDA AI/ML-based Software as Medical Device compliance per 2021 guidance, covering predetermined/adaptive algorithms, algorithm change protocols, and real-world performance monitoring","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.fda.gov/medical-devices/software-medical-device-samd/artificial-intelligence-and-machine-learning-software-medical-device","sectors":["AI \u0026 Machine Learning","Medtech","Healthcare","Biotech \u0026 Life Sciences","Technology"],"shortName":"FDA AI/ML","slug":"fda-aiml","title":"FDA AI/ML Software as Medical Device (SaMD)","url":"https://myrhc.com/frameworks/fda-aiml/"},{"agencies":["FDA"],"description":"Evaluate DSCSA compliance for pharmaceutical track-and-trace, serialization, verification, and transaction history requirements","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.fda.gov/drugs/drug-supply-chain-integrity/drug-supply-chain-security-act-dscsa","sectors":["Supply Chain","Pharma","Biotech \u0026 Life Sciences","Healthcare","Distribution"],"shortName":"FDA DSCSA","slug":"fda-dscsa","title":"FDA Drug Supply Chain Security Act (DSCSA)","url":"https://myrhc.com/frameworks/fda-dscsa/"},{"agencies":["FDA"],"description":"Evaluate mobile medical app compliance with FDA guidance, 21 CFR Part 11, data security, clinical validation, and app store requirements","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.fda.gov/medical-devices/digital-health-center-excellence/device-software-functions-including-mobile-medical-applications","sectors":["Telehealth \u0026 Digital Health","Medtech","Biotech \u0026 Life Sciences","Healthcare","Technology"],"shortName":"mHealth Apps","slug":"mobile-health-apps","title":"FDA Mobile Health App Compliance","url":"https://myrhc.com/frameworks/mobile-health-apps/"},{"agencies":["GSA","FedRAMP"],"description":"Evaluate readiness for FedRAMP authorization to provide cloud services to federal agencies, based on NIST 800-53 security controls","jurisdictions":["US Federal"],"last_verified":"2026-07-28","official_url":"https://www.fedramp.gov/","sectors":["Cybersecurity","Biotech \u0026 Life Sciences","Healthcare","Research"],"shortName":"FedRAMP","slug":"fedramp","title":"FedRAMP Authorization Readiness Assessment","url":"https://myrhc.com/frameworks/fedramp/"},{"agencies":["European Commission","EDPB"],"description":"Evaluate compliance with EU General Data Protection Regulation requirements for processing personal data of EU residents","jurisdictions":["EU","EEA"],"last_verified":"2026-07-28","official_url":"https://gdpr.eu/","sectors":["Data Privacy","Biotech \u0026 Life Sciences","Healthcare","Research","Cannabis"],"shortName":"GDPR","slug":"gdpr","title":"GDPR Compliance Assessment","url":"https://myrhc.com/frameworks/gdpr/"},{"agencies":["NIH NHGRI"],"description":"Assessment for clinical genetic testing laboratories covering CLIA high-complexity testing, FDA LDT oversight, and genetic counseling requirements","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.genome.gov/about-genomics/policy-issues/Genetic-Discrimination","sectors":["Genetic Testing","Clinical Lab","Genetics","Diagnostics","Biotech \u0026 Life Sciences"],"shortName":"Genetic Testing Compliance (CLIA/FDA)","slug":"genetic-testing-compliance","title":"Genetic Testing Compliance (CLIA/FDA)","url":"https://myrhc.com/frameworks/genetic-testing-compliance/"},{"agencies":["FTC"],"description":"Evaluate Gramm-Leach-Bliley Act compliance for financial institutions and healthcare organizations handling payment information, covering privacy notices, safeguards, and pretexting protection","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.ftc.gov/business-guidance/privacy-security/gramm-leach-bliley-act","sectors":["Financial","Finance","Healthcare","Insurance"],"shortName":"GLBA","slug":"glba","title":"GLBA Financial Privacy Compliance Assessment","url":"https://myrhc.com/frameworks/glba/"},{"agencies":["FDA","ICH"],"description":"Evaluate compliance with international ethical and quality standards for clinical trial design, conduct, and reporting","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.fda.gov/science-research/clinical-trials-and-human-subject-protection/regulations-good-clinical-practice-and-clinical-trials","sectors":["Clinical Research","Biotech \u0026 Life Sciences","Healthcare","Research"],"shortName":"GCP","slug":"gcp","title":"Good Clinical Practice (GCP) Compliance Assessment","url":"https://myrhc.com/frameworks/gcp/"},{"agencies":["FDA"],"description":"Evaluate compliance with FDA Good Manufacturing Practice regulations for pharmaceutical and biotech manufacturing quality systems","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.fda.gov/drugs/pharmaceutical-quality-resources/current-good-manufacturing-practice-cgmp-regulations","sectors":["Healthcare","Biotech \u0026 Life Sciences","Cannabis"],"shortName":"GMP","slug":"gmp","title":"Good Manufacturing Practice (GMP) Assessment","url":"https://myrhc.com/frameworks/gmp/"},{"agencies":["HHS","OCR"],"description":"Evaluate healthcare accessibility compliance covering physical access, effective communication, program access, and auxiliary aids/services per ADA and Section 504","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.hhs.gov/civil-rights/for-individuals/disability/index.html","sectors":["Accessibility \u0026 Civil Rights","Healthcare","Research","Biotech \u0026 Life Sciences"],"shortName":"ADA Accessibility","slug":"healthcare-accessibility","title":"Healthcare Accessibility (ADA \u0026 Section 504)","url":"https://myrhc.com/frameworks/healthcare-accessibility/"},{"agencies":["ASPR","HHS"],"description":"Evaluate CMS Emergency Preparedness Rule compliance covering emergency plans, policies, communication, training, testing, and integrated healthcare systems","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://aspr.hhs.gov/legal/PHEP/Pages/default.aspx","sectors":["Emergency Preparedness","Healthcare","Research","Biotech \u0026 Life Sciences"],"shortName":"Emergency Prep","slug":"healthcare-emergency-prep","title":"Healthcare Emergency Preparedness (CMS Rule)","url":"https://myrhc.com/frameworks/healthcare-emergency-prep/"},{"agencies":[],"description":"Evaluate PCI-DSS compliance for healthcare organizations processing credit card payments, covering cardholder data protection, network security, and compliance validation for medical billing","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.pcisecuritystandards.org/","sectors":["Financial","Healthcare","Finance"],"shortName":"Payment Security","slug":"payment-card-security","title":"Healthcare Payment Card Security Assessment","url":"https://myrhc.com/frameworks/payment-card-security/"},{"agencies":["HHS"],"description":"Evaluate alignment with Health and Human Services voluntary cybersecurity practices for the healthcare industry","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://405d.hhs.gov/","sectors":["Cybersecurity","Healthcare","Biotech \u0026 Life Sciences","Research"],"shortName":"HHS 405(d)","slug":"hhs-405d","title":"HHS 405(d) Cybersecurity Assessment","url":"https://myrhc.com/frameworks/hhs-405d/"},{"agencies":["HHS","OCR"],"description":"Evaluate compliance with HIPAA Business Associate Agreement requirements for vendors and service providers handling Protected Health Information (PHI)","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.hhs.gov/hipaa/for-professionals/covered-entities/sample-business-associate-agreement-provisions/index.html","sectors":["Healthcare","Biotech \u0026 Life Sciences"],"shortName":"HIPAA BAA","slug":"hipaa-baa","title":"HIPAA Business Associate Compliance","url":"https://myrhc.com/frameworks/hipaa-baa/"},{"agencies":["HHS","OCR"],"description":"Evaluate your compliance with the Health Information Technology for Economic and Clinical Health Act","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.hhs.gov/hipaa/for-professionals/special-topics/hitech-act-enforcement-interim-final-rule/index.html","sectors":["Healthcare","Biotech \u0026 Life Sciences","Research"],"shortName":"HITECH","slug":"hitech-act","title":"HITECH Act Compliance Assessment","url":"https://myrhc.com/frameworks/hitech-act/"},{"agencies":["NIH OLAW"],"description":"Assessment for Institutional Animal Care and Use Committee compliance, USDA Animal Welfare Act, and PHS Policy for vertebrate animal research","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://olaw.nih.gov/","sectors":["Animal Research","Research","Biotech \u0026 Life Sciences","Pharma","University"],"shortName":"IACUC \u0026 Animal Research Compliance","slug":"iacuc-compliance","title":"IACUC \u0026 Animal Research Compliance","url":"https://myrhc.com/frameworks/iacuc-compliance/"},{"agencies":["ICH"],"description":"Evaluate compliance with ICH E6(R2) Good Clinical Practice guidelines for clinical trial design, conduct, monitoring, and documentation","jurisdictions":["International"],"last_verified":"2026-07-28","official_url":"https://www.ich.org/page/efficacy-guidelines","sectors":["Clinical Research","Biotech \u0026 Life Sciences","Healthcare","Research"],"shortName":"ICH-GCP","slug":"ich-gcp","title":"ICH-GCP Clinical Trial Management","url":"https://myrhc.com/frameworks/ich-gcp/"},{"agencies":[],"description":"Evaluate medical device usability engineering per IEC 62366-1:2015, covering user interface design, formative and summative usability testing, and use-related risk analysis","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.iso.org/standard/63179.html","sectors":["International Standards","Medtech","Healthcare","Biotech \u0026 Life Sciences"],"shortName":"IEC 62366","slug":"iec-62366","title":"IEC 62366 Usability Engineering Assessment","url":"https://myrhc.com/frameworks/iec-62366/"},{"agencies":["HHS","OHRP"],"description":"Evaluate compliance with 45 CFR Part 46 (Common Rule) requirements for Institutional Review Boards and human subjects research protection","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.hhs.gov/ohrp/regulations-and-policy/regulations/45-cfr-46/index.html","sectors":["Clinical Research","Biotech \u0026 Life Sciences","Healthcare","Research"],"shortName":"IRB/Common Rule","slug":"irb","title":"IRB \u0026 Human Subjects Research Compliance","url":"https://myrhc.com/frameworks/irb/"},{"agencies":["ISO"],"description":"Evaluate compliance with ISO 13485:2016 Quality Management System requirements for medical device design, development, production, and servicing","jurisdictions":["International"],"last_verified":"2026-07-28","official_url":"https://www.iso.org/standard/59752.html","sectors":["Medical Device","Biotech \u0026 Life Sciences","Healthcare"],"shortName":"ISO 13485","slug":"iso13485","title":"ISO 13485:2016 QMS Assessment","url":"https://myrhc.com/frameworks/iso13485/"},{"agencies":[],"description":"Evaluate ISO 14001:2015 environmental management system compliance, covering environmental policy, planning, implementation, monitoring, and continual improvement","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.iso.org/iso-14001-environmental-management.html","sectors":["Environmental","All","Manufacturing","Biotech \u0026 Life Sciences","Pharma","Research"],"shortName":"ISO 14001","slug":"iso-14001","title":"ISO 14001 Environmental Management System","url":"https://myrhc.com/frameworks/iso-14001/"},{"agencies":[],"description":"Evaluate medical device risk management per ISO 14971:2019, covering risk analysis, risk evaluation, risk control, and post-production risk monitoring throughout device lifecycle","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.iso.org/standard/72704.html","sectors":["International Standards","Medtech","Healthcare","Biotech \u0026 Life Sciences"],"shortName":"ISO 14971","slug":"iso-14971","title":"ISO 14971 Risk Management Assessment","url":"https://myrhc.com/frameworks/iso-14971/"},{"agencies":["ISO"],"description":"Evaluate alignment with ISO/IEC 27001:2022 requirements for establishing, implementing, maintaining, and continually improving an Information Security Management System","jurisdictions":["International"],"last_verified":"2026-07-28","official_url":"https://www.iso.org/standard/27001","sectors":["Cybersecurity","Biotech \u0026 Life Sciences","Healthcare","Research","Cannabis"],"shortName":"ISO 27001","slug":"iso27001","title":"ISO 27001:2022 ISMS Assessment","url":"https://myrhc.com/frameworks/iso27001/"},{"agencies":[],"description":"Evaluate cloud security controls per ISO/IEC 27017:2015 for cloud service providers and cloud customers, covering shared responsibility, data protection, and cloud-specific risks","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.iso.org/standard/43757.html","sectors":["Cybersecurity","Technology","Healthcare","Biotech \u0026 Life Sciences","Finance","All"],"shortName":"ISO 27017","slug":"iso-27017","title":"ISO 27017 Cloud Security Assessment","url":"https://myrhc.com/frameworks/iso-27017/"},{"agencies":[],"description":"Evaluate cloud privacy controls per ISO/IEC 27018:2019 for protection of Personally Identifiable Information (PII) in public cloud environments, complementing GDPR and HIPAA requirements","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.iso.org/standard/76559.html","sectors":["Cybersecurity","Technology","Healthcare","Biotech \u0026 Life Sciences","Finance","All"],"shortName":"ISO 27018","slug":"iso-27018","title":"ISO 27018 Cloud Privacy Assessment","url":"https://myrhc.com/frameworks/iso-27018/"},{"agencies":[],"description":"Evaluate ISO 28000:2022 supply chain security management system compliance, covering security risk assessment, threat mitigation, and resilience across the supply chain","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.iso.org/standard/74437.html","sectors":["Supply Chain","All","Pharma","Biotech \u0026 Life Sciences","Manufacturing","Logistics"],"shortName":"ISO 28000","slug":"iso-28000","title":"ISO 28000 Supply Chain Security Management","url":"https://myrhc.com/frameworks/iso-28000/"},{"agencies":[],"description":"Evaluate medical device software development per ISO 62304:2006/AMD1:2015, covering software safety classification, development processes, risk management, and maintenance","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.iso.org/standard/38421.html","sectors":["International Standards","Medtech","Healthcare","Biotech \u0026 Life Sciences","Technology"],"shortName":"ISO 62304","slug":"iso-62304","title":"ISO 62304 Software Lifecycle Assessment","url":"https://myrhc.com/frameworks/iso-62304/"},{"agencies":[],"description":"Evaluate ISO 9001:2015 quality management system compliance, covering leadership, planning, support, operation, performance evaluation, and continual improvement","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.iso.org/iso-9001-quality-management.html","sectors":["Quality Management","All","Manufacturing","Technology","Healthcare","Biotech \u0026 Life Sciences"],"shortName":"ISO 9001","slug":"iso-9001","title":"ISO 9001 Quality Management System","url":"https://myrhc.com/frameworks/iso-9001/"},{"agencies":[],"description":"Evaluate building and fire code compliance for laboratory, cleanroom, and BSL facilities covering construction, life safety, egress, and specialized systems","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.iccsafe.org/","sectors":["Facilities","Biotech \u0026 Life Sciences","Pharma","Research","Medtech","Manufacturing"],"shortName":"Building Codes","slug":"building-codes","title":"Lab \u0026 Facility Building Code Compliance","url":"https://myrhc.com/frameworks/building-codes/"},{"agencies":["Massachusetts CCC"],"description":"Evaluate compliance with Massachusetts Cannabis Control Commission regulations (935 CMR 500.000) for cultivation, manufacturing, testing, and retail operations","jurisdictions":["Massachusetts","US"],"last_verified":"2026-07-28","official_url":"https://masscannabiscontrol.com/","sectors":["Cannabis"],"shortName":"MA CCC","slug":"ma-ccc","title":"MA Cannabis Control Commission Compliance Assessment","url":"https://myrhc.com/frameworks/ma-ccc/"},{"agencies":["Massachusetts"],"description":"Evaluate compliance with Massachusetts PATCH Act requirements for preventing opioid diversion and protecting controlled substances in healthcare settings","jurisdictions":["Massachusetts","US"],"last_verified":"2026-07-28","official_url":"https://www.mass.gov/info-details/massachusetts-patch-act","sectors":["Healthcare","Cannabis"],"shortName":"MA PATCH Act","slug":"ma-patch-act","title":"MA PATCH Act Compliance Assessment","url":"https://myrhc.com/frameworks/ma-patch-act/"},{"agencies":["FDA","IMDRF"],"description":"Evaluate readiness for Medical Device Single Audit Program certification covering FDA, Health Canada, TGA, PMDA, and ANVISA requirements in one audit","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.fda.gov/medical-devices/cdrh-international-programs/medical-device-single-audit-program-mdsap","sectors":["Medical Device","Biotech \u0026 Life Sciences","Healthcare"],"shortName":"MDSAP","slug":"mdsap","title":"MDSAP Readiness Assessment","url":"https://myrhc.com/frameworks/mdsap/"},{"agencies":["CMS"],"description":"Evaluate compliance with CMS provider enrollment and revalidation requirements for Medicare and Medicaid participation","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.cms.gov/medicare/enrollment-renewal/providers-suppliers","sectors":["Healthcare"],"shortName":"Medicare Enrollment","slug":"medicare-enrollment","title":"Medicare/Medicaid Enrollment Compliance Assessment","url":"https://myrhc.com/frameworks/medicare-enrollment/"},{"agencies":["DOL","HHS"],"description":"Evaluate compliance with Mental Health Parity and Addiction Equity Act covering insurance coverage equity, treatment limitations, and disclosure requirements","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.dol.gov/agencies/ebsa/laws-and-regulations/laws/mental-health-and-substance-use-disorder-parity","sectors":["Mental Health","Healthcare","Insurance"],"shortName":"MHPAEA","slug":"mental-health-parity","title":"Mental Health Parity \u0026 Addiction Equity Act (MHPAEA)","url":"https://myrhc.com/frameworks/mental-health-parity/"},{"agencies":["Metrc"],"description":"Evaluate compliance with METRC seed-to-sale tracking system requirements for cannabis establishments in regulated states","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.metrc.com/","sectors":["Cannabis"],"shortName":"METRC","slug":"metrc","title":"METRC Seed-to-Sale Tracking Compliance","url":"https://myrhc.com/frameworks/metrc/"},{"agencies":["NIH"],"description":"Evaluate compliance with NIH Guidelines for research involving recombinant or synthetic nucleic acid molecules","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://osp.od.nih.gov/policies/biosafety-and-biosecurity-policy/","sectors":["Clinical Research","Biotech \u0026 Life Sciences","Research","Healthcare"],"shortName":"NIH rDNA","slug":"nih-guidelines","title":"NIH Recombinant DNA Guidelines Assessment","url":"https://myrhc.com/frameworks/nih-guidelines/"},{"agencies":["NIST"],"description":"Evaluate compliance with NIST SP 800-53 Revision 5 security and privacy controls for federal information systems and organizations","jurisdictions":["US Federal"],"last_verified":"2026-07-28","official_url":"https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final","sectors":["Cybersecurity","Biotech \u0026 Life Sciences","Healthcare","Research"],"shortName":"NIST 800-53","slug":"nist-800-53","title":"NIST 800-53 Rev 5 Assessment","url":"https://myrhc.com/frameworks/nist-800-53/"},{"agencies":["NIST"],"description":"Evaluate cybersecurity maturity using NIST CSF 2.0 core functions: Govern, Identify, Protect, Detect, Respond, Recover - designed for all sectors including healthcare and critical infrastructure","jurisdictions":["US","International"],"last_verified":"2026-07-28","official_url":"https://www.nist.gov/cyberframework","sectors":["Cybersecurity","Healthcare","Biotech \u0026 Life Sciences","Finance","Technology","All"],"shortName":"NIST CSF","slug":"nist-csf","title":"NIST Cybersecurity Framework 2.0 Assessment","url":"https://myrhc.com/frameworks/nist-csf/"},{"agencies":["New York"],"description":"Evaluate compliance with New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act, covering data security safeguards, breach notification, and private information protection","jurisdictions":["New York","US"],"last_verified":"2026-07-28","official_url":"https://www.nysenate.gov/legislation/laws/GBS/899-BB","sectors":["State Regulations","Healthcare","Biotech \u0026 Life Sciences","Finance","Technology","All"],"shortName":"NY SHIELD","slug":"ny-shield","title":"NY SHIELD Act Compliance Assessment","url":"https://myrhc.com/frameworks/ny-shield/"},{"agencies":[],"description":"Evaluate Occupational Safety and Health Administration (OSHA) laboratory standard compliance for research and clinical labs working with hazardous chemicals, covering Chemical Hygiene Plan, training, and exposure controls","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.osha.gov/laboratories","sectors":["Lab Safety","Biotech \u0026 Life Sciences","Healthcare","Research","Pharma"],"shortName":"OSHA Lab","slug":"osha-lab-standard","title":"OSHA Lab Standard Compliance (29 CFR 1910.1450)","url":"https://myrhc.com/frameworks/osha-lab-standard/"},{"agencies":["OSHA"],"description":"Evaluate OSHA general industry workplace safety compliance covering hazard communication, recordkeeping, emergency action plans, and worker protection","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.osha.gov/","sectors":["HR \u0026 Employment","All","Manufacturing","Biotech \u0026 Life Sciences","Pharma","Research"],"shortName":"OSHA Workplace","slug":"osha-workplace","title":"OSHA Workplace Safety Compliance","url":"https://myrhc.com/frameworks/osha-workplace/"},{"agencies":["CDC"],"description":"Evaluate outbreak investigation and infection control readiness covering contact tracing, infection prevention, public health coordination, and outbreak management","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.cdc.gov/outbreaks/index.html","sectors":["Public Health","Healthcare","Research","Biotech \u0026 Life Sciences"],"shortName":"Outbreak Response","slug":"outbreak-investigation","title":"Outbreak Investigation \u0026 Infection Control","url":"https://myrhc.com/frameworks/outbreak-investigation/"},{"agencies":["CDC"],"description":"Evaluate pandemic preparedness covering surge capacity, infection control, PPE stockpiling, crisis standards of care, and workforce protection","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.cdc.gov/pandemic-flu/php/national-strategy/index.html","sectors":["Emergency Preparedness","Healthcare","Research","Biotech \u0026 Life Sciences"],"shortName":"Pandemic Prep","slug":"pandemic-response","title":"Pandemic Response \u0026 Infectious Disease Preparedness","url":"https://myrhc.com/frameworks/pandemic-response/"},{"agencies":["PCI SSC"],"description":"Evaluate compliance with Payment Card Industry Data Security Standard v4.0 requirements for organizations that store, process, or transmit cardholder data","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.pcisecuritystandards.org/document_library/","sectors":["Cybersecurity","Healthcare","Cannabis"],"shortName":"PCI-DSS","slug":"pci-dss","title":"PCI-DSS v4.0 Compliance Assessment","url":"https://myrhc.com/frameworks/pci-dss/"},{"agencies":["DEA"],"description":"Assessment for state pharmacy board licensure and DEA controlled substance registration for pharmacies and research facilities","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.deadiversion.usdoj.gov/","sectors":["Pharmacy","Healthcare","Research","Biotech \u0026 Life Sciences"],"shortName":"Pharmacy Licensing \u0026 DEA Compliance","slug":"pharmacy-licensing","title":"Pharmacy Licensing \u0026 DEA Compliance","url":"https://myrhc.com/frameworks/pharmacy-licensing/"},{"agencies":[],"description":"Evaluate readiness for professional liability insurance (E\u0026O, D\u0026O, malpractice) by assessing risk management practices, documentation, and governance","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.naic.org/","sectors":["Insurance","All","Healthcare","Biotech \u0026 Life Sciences","Technology","Consulting"],"shortName":"Prof Liability","slug":"professional-liability","title":"Professional Liability Insurance Readiness","url":"https://myrhc.com/frameworks/professional-liability/"},{"agencies":["CDC"],"description":"Evaluate public health reporting compliance covering disease surveillance, immunization registries, syndromic surveillance, and vital statistics reporting","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.cdc.gov/surveillancepractice/index.html","sectors":["Public Health","Healthcare","Biotech \u0026 Life Sciences","Research"],"shortName":"PH Reporting","slug":"public-health-reporting","title":"Public Health Reporting \u0026 Surveillance","url":"https://myrhc.com/frameworks/public-health-reporting/"},{"agencies":["HHS"],"description":"Evaluate remote patient monitoring program compliance covering CMS reimbursement, device accuracy, data transmission security, and clinical workflows","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://telehealth.hhs.gov/providers/best-practice-guides/telehealth-and-remote-patient-monitoring","sectors":["Telehealth \u0026 Digital Health","Healthcare","Medtech","Biotech \u0026 Life Sciences"],"shortName":"RPM","slug":"remote-patient-monitoring","title":"Remote Patient Monitoring (RPM) Compliance","url":"https://myrhc.com/frameworks/remote-patient-monitoring/"},{"agencies":[],"description":"Evaluate research data management practices including FAIR principles (Findable, Accessible, Interoperable, Reusable), data integrity, and regulatory compliance","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://sharing.nih.gov/","sectors":["Clinical Research","Biotech \u0026 Life Sciences","Healthcare","Research"],"shortName":"RDM","slug":"research-data-management","title":"Research Data Management \u0026 FAIR Principles","url":"https://myrhc.com/frameworks/research-data-management/"},{"agencies":["SAMHSA"],"description":"Evaluate SAMHSA grant compliance covering federal requirements, financial management, data reporting, and program evaluation for substance abuse treatment grants","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.samhsa.gov/grants","sectors":["Mental Health","Healthcare","Nonprofit"],"shortName":"SAMHSA Grants","slug":"samhsa-grants","title":"SAMHSA Grant Compliance \u0026 Reporting","url":"https://myrhc.com/frameworks/samhsa-grants/"},{"agencies":["AICPA"],"description":"Evaluate readiness for SOC 2 Type II audit based on AICPA Trust Services Criteria for security, availability, processing integrity, confidentiality, and privacy","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.aicpa-cima.com/topic/audit-assurance/audit-and-assurance-greater-than-soc-2","sectors":["Cybersecurity","Biotech \u0026 Life Sciences","Healthcare","Research","Cannabis"],"shortName":"SOC 2","slug":"soc2","title":"SOC 2 Type II Readiness Assessment","url":"https://myrhc.com/frameworks/soc2/"},{"agencies":["HHS"],"description":"Evaluate telehealth program compliance covering state licensure, prescribing rules, HIPAA security, informed consent, and reimbursement requirements","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://telehealth.hhs.gov/","sectors":["Telehealth \u0026 Digital Health","Healthcare","Mental Health","Biotech \u0026 Life Sciences","Pharma"],"shortName":"Telehealth","slug":"telehealth-compliance","title":"Telehealth \u0026 Telemedicine Compliance","url":"https://myrhc.com/frameworks/telehealth-compliance/"},{"agencies":["Texas"],"description":"Evaluate compliance with Texas Health \u0026 Safety Code Chapter 181 (Medical Records Privacy), covering protected health information, patient consent, disclosure requirements, and breach notification","jurisdictions":["Texas","US"],"last_verified":"2026-07-28","official_url":"https://statutes.capitol.texas.gov/Docs/HS/htm/HS.181.htm","sectors":["State Regulations","Healthcare","Biotech \u0026 Life Sciences"],"shortName":"TX Privacy","slug":"tx-medical-privacy","title":"Texas Medical Privacy Compliance","url":"https://myrhc.com/frameworks/tx-medical-privacy/"},{"agencies":[],"description":"Evaluate Unique Device Identification compliance for FDA (21 CFR Part 801/830) and EU MDR (Article 27), covering UDI assignment, labeling, GUDID/EUDAMED registration","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.fda.gov/medical-devices/device-labeling/unique-device-identification-system-udi-system","sectors":["Medical Device","Medtech","Healthcare"],"shortName":"UDI","slug":"udi-compliance","title":"UDI Compliance Assessment (FDA \u0026 EU)","url":"https://myrhc.com/frameworks/udi-compliance/"},{"agencies":["HHS"],"description":"Assessment for third-party vendor security, risk assessments, business associate agreements, and vendor lifecycle management","jurisdictions":["US"],"last_verified":"2026-07-28","official_url":"https://www.hhs.gov/hipaa/for-professionals/security/guidance/index.html","sectors":["Vendor Management","All","Healthcare","Biotech \u0026 Life Sciences","Pharma","Finance"],"shortName":"Vendor Risk Management \u0026 Third-Party Security","slug":"vendor-risk-management","title":"Vendor Risk Management \u0026 Third-Party Security","url":"https://myrhc.com/frameworks/vendor-risk-management/"}],"generated":"2026-07-28T12:40:58Z","name":"MyRHC Compliance Framework Index","url":"https://myrhc.com/"}