Some of the most well-know sets of compliance rules

• SOX - Sarbanes Oxley
  • SOX for SQL Server by RedGate
  • MSSQLTips article for SOX
• PCI DSS - Payment Card Industry Data Security Standard
  • MSSQLTips article on PCI for SQL Server
• HIPAA - Health Insurance Portability and Accountability Act
  • HIPAA for SQL Server by RedGate
• GDPR - General Data Protection Regulation
  • Free e-book from Microsoft on SQL Server GDPR
• FISMA/NIST - Federal Information Security Management Act
  • Nice list from ApexSQL about FISMA and SQL Server
• GLBA - Gramm–Leach–Bliley Act - Financial Services Modernization Act of 1999
• ISO/IEC 27001
• FERPA
  • SQL Server for FERBA by ApexSQL
• FIPS:
  • Microsoft on FIPS for SQL Server
• NERC CIP
• CJIS
• FERBA
• CIS-CAT
• C2 Auditing - This feature will be removed in a future version of Microsoft SQL Server. Avoid using this feature in new development work, and plan to modify applications that currently use this feature. The C2 security standard has been superseded by Common Criteria Certification. See the common criteria compliance enabled Server Configuration Option.

SQL Compliance Manager Products

• RedGate
• Quest - ApexSQL
• Idera