US State & Sector Vendor-Risk Guides
How Cyber Crucible supports US state privacy and security laws and sector rules from a vendor-selection perspective — New York DFS, California, Texas, Virginia, Colorado, Massachusetts, Illinois, and Pennsylvania. States plainly what Cyber Crucible holds and does not hold.
Which US state privacy and security laws affect security-vendor selection?
Short answer: A growing patchwork of US state laws imposes obligations that flow down to a compan...
How does Cyber Crucible support New York DFS Part 500 cybersecurity requirements?
Short answer: For a financial institution covered by New York DFS Part 500 (23 NYCRR 500), Cyber ...
How does Cyber Crucible support California CCPA/CPRA vendor obligations?
Short answer: Cyber Crucible acts as a service provider under the CCPA/CPRA, bound by contract to...
How does Cyber Crucible support the Texas Data Privacy and Security Act (TDPSA)?
Short answer: Under the Texas Data Privacy and Security Act, Cyber Crucible acts as a processor b...
How does Cyber Crucible support Virginia's Consumer Data Protection Act (VCDPA)?
Short answer: Cyber Crucible supports a controller's VCDPA obligations as a processor operating u...
How does Cyber Crucible support the Colorado Privacy Act (CPA)?
Short answer: Cyber Crucible operates as a processor under the Colorado Privacy Act, bound by a d...
How does Cyber Crucible support Massachusetts 201 CMR 17.00 (WISP)?
Short answer: Massachusetts 201 CMR 17.00 requires any organization holding personal information ...
How does Cyber Crucible address Illinois BIPA and biometric-data concerns?
Short answer: Cyber Crucible does not collect, store, or process biometric identifiers or biometr...
How does Cyber Crucible support Pennsylvania's breach-notification law?
Short answer: Pennsylvania's Breach of Personal Information Notification Act (73 P.S. §2301, as a...
How does Cyber Crucible support the Connecticut Data Privacy Act (CTDPA)?
Short answer: Cyber Crucible operates as a processor under the Connecticut Data Privacy Act, boun...
How does Cyber Crucible support Utah's Consumer Privacy Act (UCPA)?
Short answer: Cyber Crucible acts as a processor under the Utah Consumer Privacy Act, following t...
How does Cyber Crucible support Oregon's Consumer Privacy Act (OCPA)?
Short answer: Cyber Crucible operates as a processor under the Oregon Consumer Privacy Act, bound...
How does Cyber Crucible support Washington's My Health My Data Act?
Short answer: Washington's My Health My Data Act regulates "consumer health data" broadly and car...
How does Cyber Crucible support the newer 2025–2026 state privacy laws?
Short answer: A wave of comprehensive state privacy laws took effect across 2025 and 2026 — inclu...