VectorUSA identifies the applicable frameworks based on state, federal, and local regulatory requirements; the type of data the organization stores, processes, and transmits; and other industry-specific best practices or guidelines. These can be sourced through industry-specific trade groups or organizations, insurance requirements, or best practices for a similarly sized organization.