> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam-rn/cortex-xsiam-release-information/compliance-standards-updates/october-2026.md).
# October 2026
## New built-in compliance standards
The following compliance standards were added to the Standards Catalog. You can now access them from the **Posture Management → Compliance → Catalogs → Standards** page.
| Compliance standard | Version | Description |
| ----------------------------------------------------------------- | ------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| NIS 2 Directive (EU) 2022/2555 | - | The NIS 2 Directive (EU) 2022/2555 is EU-wide legislation on cybersecurity. It establishes cybersecurity risk-management measures and reporting obligations for essential and important entities operating within the European Union, aiming to achieve a high common level of cybersecurity across the Union. |
| CIS Amazon Linux 2023 Benchmark Level 1 and Level 2 Server v1.0.0 | 1.0.0 | The CIS Amazon Linux 2023 Benchmark provides a consensus-based security hardening baseline for Amazon Linux 2023 servers, defining Level 1 and Level 2 configuration controls to reduce the system’s attack surface and align with common compliance frameworks. This benchmark is intended for organizations that need a standardized, auditable set of security settings for Amazon Linux 2023 instances and supports compliance assessments and security reporting across cloud and on-premises environments. |
## Updated built-in compliance standards
The underlying rules were updated for the some standards:
{% hint style="info" %}
Updates to compliance standards may affect assessment results.
{% endhint %}
| Change summary | Details |
| ------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Expanded AI risk coverage with Attack Surface Management rules | We have appended AI-focused Attack Surface Management rules across our five core compliance standards to bolster the security, governance, and risk management of your AI deployments.
By providing a deeper assessment of AI-driven external risks and attack surfaces, this update ensures you stay continuously aligned with the latest global safety, privacy, and ethical mandates.
|
| Expanded compliance coverage with SaaS Security Posture Management rule mapping | We have mapped our SaaS Security Posture Management rules to 10 key compliance standards to bolster the security and posture management of your SaaS applications.
By providing a deeper assessment of SaaS configurations, identity risks, and data exposures, this update ensures your environment stays continuously aligned with global regulatory mandates and industry best practices.
|
| Expanded AI compliance coverage in SaaS environments | We have mapped our AI-specific SaaS Security Posture Management rules across four key standards to bolster the security and posture management of AI capabilities used in your SaaS applications.
By providing a deeper assessment of AI-related SaaS configurations and data exposures, this update ensures you stay continuously aligned with the latest global safety, privacy, and regulatory mandates.
|
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam-rn/cortex-xsiam-release-information/compliance-standards-updates/october-2026.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.