Regulatory & Standards Compliance

eCommerce:
PCI-DSS- PCI- Data Security Standards.
PA-DSS- Payment Applications Data Security Standards.

Financial Services:
GLBA- Gramm-Leach-Bliley Act.

Energy:
NERC- North American Electric Reliability Corporation.
FERC- The Federal Energy Regulatory Commission.

Government:
FISMA- Federal Information Security Management Act of 2002.

Others:

HIPAA- Health Insurance Portability and Accountability Act of 1996.
SOX- Sarbanes–Oxley Act of 200.
ISACA- Information Systems Audit and Control Association.
OSSTMM- Open Source Security Testing Methodology Manual.
OWASP- Open Web Application Security Project.

Certifications:

CISSP- Certified Information Systems Security Profession.
CISA- Certified Information Systems Auditor is a professional certification for Information technology audit professionals sponsored by the Information Systems Audit and Control Association (ISACA).
CEH- Certified Ethical Hacker.