AIG maintains a suite of information security, privacy and data protection-related policies, standards, procedures, and guidelines—specifically leveraging widely accepted industry frameworks such as National Institute of Standards and Technology (NIST) Cybersecurity Framework, the International Organization for Standardization (ISO) regulatory guidance and widely adopted industry best practices.