Cloud Service Authorization and Monitoring (PS-26-001)  - Establishes enterprise requirements for the authorization and ongoing risk management of third-party cloud services

Cloud Service Authorization and Monitoring (SS-26-003): Establishes minimum requirements for validating, authorizing, and continuously monitoring third-party cloud services, including Infrastructure as a Service (IaaS), Software as a Service (SaaS), and Platform as a Service (PaaS)

Enterprise Data Classification & Handling (PS-26-002): Establishes a uniform, enterprise-wide approach for classifying State data

Enterprise Data Classification and Handling (SS-26-002): Establishes the mandatory minimum requirements to implement enterprise data classification, labeling, access, transmission, sharing, and disposal