The compliance team is working to implement standards that align with organizational needs. A U.S. company works closely with government organizations by supporting a federal program and providing recruitment and HR services. The organization uses cloud services and retains its sensitive data in cloud storage. Which two industry standards should the compliance team recommend implementing? (Choose two.)