> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/compliance-standards-updates/june-2026.md). # June 2026 ## New built-in compliance standards The following compliance standards were added to the Standards Catalog. You can now access them from the **Posture Management → Compliance → Catalogs → Standards** page. | Compliance standard | Description | | | ----------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | - | | Cyber Risk Institute (CRI) Profile v2.1 | Cyber Risk Institute (CRI) has developed CRI's Profile v2.1 framework to create an efficient approach to technology and cybersecurity risk management that effectively counters dynamic and evolving threats and provides adequate assurance to government supervisors. | | | Korea – Information Security Management System (ISMS) For Finance | The Korea Information Security Management System (K-ISMS) is a government-backed standard introduced in 2002 under Article 47 of the Act on Promotion of Information and Communications Network Utilization and Information Protection. The standard was developed by KISA to adapt the national ISMS-P (Information Security & Personal Information Management System) requirements governed by the Information and Communications Network Act and the Personal Information Protection Act—to the unique regulatory and operational environment of the financial industry. | | | New Zealand Information Security Manual (NZISM) v3.9 | The New Zealand Information Security Manual (NZISM) is the New Zealand Government's manual on information assurance and information systems security. Its role is to promote a consistent approach to information assurance and information security across all New Zealand Government agencies. The NZISM is based on security threat and risk assessments for any information that is collected, processed, stored or communicated by New Zealand Government systems with corresponding risk treatments (control sets) to manage security risk. The NZISM is intended to support the structure and assist the implementation of the New Zealand Government policy that requires agencies to protect the privacy, integrity and confidentiality of the information they collect, process, store and archive. | | | NIST SP 800-172 | NIST Special Publication 800-172, titled "Enhanced Security Requirements for Protecting Controlled Unclassified Information" contains recommendations for enhanced security requirements to provide additional protection for Controlled Unclassified Information (CUI) in nonfederal systems and organizations when such information is associated with critical programs or high value assets. The enhanced security requirements are designed to respond to the advanced persistent threat (APT) and supplement the basic and derived security requirements in Special Publication 800-171. | | ## Updated built-in compliance standards The underlying rules were updated for the following compliance standards: {% hint style="info" %} Updates to compliance standards may affect assessment results. {% endhint %} | Change summary | Details | | ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Mapped AI-focused cloud security posture management rules to all existing AI standards |

Appended new AI-related configuration rules to the existing standards to strengthen the governance and management of AI systems.

This provides a more comprehensive assessment of AI risk management practices, ensuring alignment with international safety and ethical standards.

The following standards were updated:

| | Mapped Kubernetes security posture management rules to the existing cloud workload protection standards |

Introduced our first set of KSPM-specific security configuration rules and enabled rule mapping on existing benchmarks.

This empowers organizations to identify and remediate Kubernetes misconfigurations for the first time, establishing a baseline for foundational security hygiene.

The following standards were updated:

| --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/compliance-standards-updates/june-2026.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.