Engineering Regulatory Bodies — Family Index

Companion to standards-bodies (organizations that publish voluntary standards) and engineering-codes (the codes themselves, by discipline). Where those two notes catalog SDOs and code documents, this note catalogs the regulatory bodies — government agencies and conformity-assessment organizations that have authority over engineering practice and enforce compliance through licensing, market clearance, factory inspection, recalls, fines, or criminal penalties.

A standard is voluntary. A code is a standard adopted by an authority. A regulation is law promulgated by a government with binding effect under that jurisdiction. The body that issues, interprets, and enforces a regulation is the regulator. The same technical content may live in all three: ASTM A615 (standard) is referenced by ACI 318 (code) which is incorporated by reference into the IBC (a model code) which is adopted into state and local building law (regulation) enforced by the building department (regulator).

US federal entries follow the convention: name, established, statute, jurisdictional scope, what engineering activities they gate.

1. At a glance — US federal

Agency	Domain	Statutory authority
FAA	Civil aviation	49 USC ch. 401
NRC	Civil nuclear	42 USC ch. 23
NHTSA	Motor vehicles	49 USC ch. 301
FMCSA	Commercial motor carriers	49 CFR Subch. B
FCC	Radio + telecom	47 USC
EPA	Environmental	CAA, CWA, RCRA, TSCA, FIFRA, CERCLA
OSHA	Workplace safety	OSH Act 1970
MSHA	Mining workplace safety	Federal Mine Safety and Health Act 1977
FDA	Food, drugs, devices, cosmetics, tobacco	FDCA, 21 USC
CPSC	Consumer products	CPSA, FHSA, FFA
BSEE	Offshore oil + gas safety	OCSLA
PHMSA	Pipelines + hazmat transport	49 USC ch. 51, 601
FERC	Wholesale electric, gas pipelines, hydro	FPA, NGA
NERC	Bulk electric system reliability	EPAct 2005 (FERC-certified ERO)
FRA	Railroad	49 USC ch. 201
STB	Rail rates + service	49 USC ch. 13
USCG	Maritime, recreational boats, OPV	14 USC, 46 USC
ATF	Firearms + explosives	18 USC ch. 40, 44
FSIS	Meat + poultry + egg products	FMIA, PPIA, EPIA
APHIS	Animal + plant health	various
EEOC	Employment discrimination	Title VII, ADA, ADEA
NIST	Measurement + cybersecurity standards	15 USC ch. 7
DOE	Energy R&D, weapons complex	DOE Org. Act 1977
NASA	Civil aerospace R&D + procurement	NASA Act 1958
DOD/DCMA/DCAA	Defense acquisition	10 USC, DFARS
DSS / DCSA	Industrial security clearance	NISPOM (32 CFR Part 117)

2. Aviation — FAA

Federal Aviation Administration, US DOT (Department of Transportation). Established 1958 (Federal Aviation Act, replacing CAA / CAB). Authority: 49 USC chapters 401–501. Regulations: 14 CFR (“FAR” — Federal Aviation Regulations).

What it gates:

• Type Certification of aircraft, engines, propellers (FAR 21).
• Production Certification (FAR 21 Subpart G) — manufacturer’s quality system.
• Airworthiness Certification (FAR 21 Subpart H) — individual aircraft.
• Standard Airworthiness categories: Normal (FAR 23), Transport (FAR 25), Normal-Rotorcraft (FAR 27), Transport-Rotorcraft (FAR 29), Engines (FAR 33), Propellers (FAR 35).
• DO-178C (RTCA, FAA-recognized) — software for airborne systems. Five DALs (Design Assurance Levels) A through E.
• DO-254 — hardware (FPGA, ASIC) for airborne systems.
• DO-160G — environmental qualification (temperature, vibration, EMC, lightning, HIRF).
• Pilot + maintenance licensing (FAR 61, 65, 67, 121, 135, 145).
• Air-carrier ops (FAR 121 scheduled, 135 on-demand, 91 general).
• Drone operations (FAR 107 — sub-55-lb commercial UAS; Remote ID Final Rule effective Sep 2023).
• Spaceflight licensing — actually under FAA AST (Office of Commercial Space Transportation), under FAR Parts 400–460. Licenses launch operators (SpaceX, Blue Origin, Rocket Lab, ULA, Sierra Space).
• NextGen / ATC — air traffic control modernization, ADS-B (Auto-Dependent Surveillance-Broadcast) mandate since 2020.

Related international: ICAO (UN, Annexes 1-19 to Chicago Convention), EASA (European Union Aviation Safety Agency, replacing JAA, EU Reg 2018/1139), TCCA (Transport Canada Civil Aviation), CAA UK, CASA Australia, ANAC Brazil, CAAC China.

3. Nuclear — NRC, NNSA, DOE

Nuclear Regulatory Commission (NRC), independent, Atomic Energy Act 1954 + Energy Reorganization Act 1974. Regulations: 10 CFR.

What it gates:

• Reactor licensing — Part 50 (construction permit + operating license), Part 52 (combined COL for new builds), Part 53 (proposed advanced-reactor risk-informed pathway, 2025 final).
• Fuel-cycle facilities — Parts 70, 40, 76.
• Materials licensing — Part 30 (byproduct), 35 (medical), 36, 39 (industrial radiography), 71 (transport).
• Decommissioning — Part 50.82, Part 20.
• Radiation protection — Part 20 (dose limits).
• Quality assurance — Appendix B to Part 50 (the nuclear-grade QA program).
• Security — Part 73.
• Reactor operator licensing — Part 55.

Coordinate: DOE owns federal nuclear weapons + naval reactors + national-lab reactors; not under NRC. NNSA (semi-autonomous DOE branch) — weapons stockpile stewardship. NRC and DOE jointly oversee SMR demonstration programs.

Related international: IAEA (International Atomic Energy Agency, UN), ONR UK, ASN France, STUK Finland, CSN Spain, NSC South Korea, NRA Japan (post-Fukushima reorganization), CNSC Canada.

4. Vehicles — NHTSA, FMCSA, EPA, NHTSA-OAR

NHTSA (National Highway Traffic Safety Administration), DOT. Established 1970 (Highway Safety Act). Authority: 49 USC ch. 301. Regulations: 49 CFR Part 571 (FMVSS — Federal Motor Vehicle Safety Standards).

What it gates:

• FMVSS 100-series — crashworthiness (203 steering column, 208 occupant crash, 214 side impact).
• FMVSS 200-series — crash-avoidance (208 occupant restraint, 213 child seats).
• FMVSS 300-series — fire safety (301 fuel-system integrity).
• Self-certification by manufacturers (vs European type-approval).
• Recall authority — defect investigations + mandatory recalls.
• CAFE fuel-economy standards — 49 CFR Part 533, 49 USC ch. 329 (revised 2024).
• AV (Autonomous Vehicle) policy — non-binding guidance + ADS exemptions (Cruise, Waymo, Zoox); rulemaking proceeding ongoing 2026.

FMCSA (Federal Motor Carrier Safety Administration), DOT — commercial vehicles >10,000 lb. Authority: 49 USC ch. 311, 49 CFR Subch. B. Hours-of-service, ELD mandate, driver licensing (CDL), HAZMAT placarding (49 CFR 172). The “DOT number” registration.

EPA Office of Transportation and Air Quality (OTAQ) — tailpipe emissions, 40 CFR Parts 86 (light-duty), 88 (clean-fuel), 1036/1037 (heavy-duty), 1054/1065 (nonroad), 1039 (locomotive). EPA Tier 4 Final standards for nonroad diesel since 2015; light-duty greenhouse gas standards (2023 multipollutant rule); CARB (California Air Resources Board) — preemptive waiver under CAA §209; ZEV mandate (Adv Clean Cars II) followed by ~17 ALMV states.

International: UNECE WP.29 (UN Economic Commission for Europe Working Party 29) — global regulations for vehicles; UN R Reg series (R-13 brakes, R-44 child seats, R-100 EV safety, R-155 cybersecurity, R-156 software updates). ECE-type-approval. ISO 26262 — functional safety (ASIL A-D). ISO/PAS 21448 (SOTIF) — safety of intended functionality for AV. Adopted by EU under 2018/858 + Type Approval Regulation. ECE WP.29 GTR series. China: GB standards + GTR-derivatives via CATARC/MIIT.

5. Radio, telecom — FCC

Federal Communications Commission, independent, Communications Act 1934. Authority: 47 USC. Regulations: 47 CFR.

What it gates:

• Equipment authorization — Part 15 (unlicensed Wi-Fi, BT, etc., low-power), Part 22 (cellular), Part 24 (PCS), Part 27 (broadband, 5G NR), Part 95 (personal wireless), Part 73 (broadcast), Part 76 (cable), Part 90 (private land mobile), Part 96 (CBRS).
• Spectrum allocation + licensing — Auctions (since 1994, FCC Auctions 5-110).
• SDoC (Supplier Declaration of Conformity) and Certification procedures by FCC Recognition + TCB (Telecom Certification Bodies — third-party).
• EMC requirements — Class A (commercial / industrial) vs Class B (residential).
• RF exposure — Part 1 (general public, 1.6 W/kg SAR limit) and Part 2.
• Net neutrality — Title II classification flip-flopped across administrations.

International: ITU (UN Specialized Agency — radio regulations, optical and microwave) — ITU-R recommendations, World Radiocommunication Conferences (WRC). ETSI (European Telecommunications Standards Institute) — EN ETSI standards adopted under EU RED 2014/53/EU (Radio Equipment Directive). Industry Canada / ISED (Innovation, Science and Economic Development Canada). OFCOM UK. ANATEL Brazil. MIC Japan. NCC Taiwan. SRRC China.

6. Environment — EPA + state agencies

Environmental Protection Agency, independent, established 1970 (Reorganization Plan No. 3). Authorities span:

• Clean Air Act (CAA) — NAAQS, NSPS, NESHAP. Mobile sources (Title II) — transportation engineering tie-in. Stationary sources (Title V permits). Greenhouse gas under Massachusetts v. EPA (2007) endangerment finding.
• Clean Water Act (CWA) — NPDES (National Pollutant Discharge Elimination System) permits; effluent guidelines under 40 CFR Subchapter N.
• Resource Conservation and Recovery Act (RCRA) — hazardous waste (Subtitle C), municipal solid waste (Subtitle D), underground storage tanks (Subtitle I). Hazardous-waste generator categorization.
• Toxic Substances Control Act (TSCA) — pre-manufacture notification for new chemicals; PFAS rules ongoing.
• Federal Insecticide, Fungicide, and Rodenticide Act (FIFRA) — pesticide registration.
• Comprehensive Environmental Response, Compensation, and Liability Act (CERCLA / Superfund) — site cleanup liability.
• Safe Drinking Water Act (SDWA) — public water-supply standards (40 CFR Part 141).
• Spill Prevention, Control and Countermeasure (SPCC, 40 CFR 112) — diesel fuel tank containment (relevant to data center).

State agencies enforce nearly all EPA programs via delegated authority. Examples: California Air Resources Board (CARB), Texas Commission on Environmental Quality (TCEQ), Virginia DEQ, Oregon DEQ.

International: UNEP. EEA (European Environment Agency). EU directives: Industrial Emissions Directive (2010/75/EU, revised 2024), Water Framework Directive (2000/60/EC), Waste Framework Directive (2008/98/EC), Urban Wastewater Treatment Directive (91/271/EEC). REACH and CLP/GHS under ECHA. China MEE (Ministry of Ecology and Environment). India CPCB. Japan METI/MOE.

7. Workplace — OSHA + MSHA

Occupational Safety and Health Administration (OSHA), US DOL. OSH Act 1970. Regulations: 29 CFR Parts 1910 (general industry), 1915 (shipyards), 1926 (construction), 1928 (agriculture).

Key standards:

• 29 CFR 1910.95 — occupational noise.
• 29 CFR 1910.119 — Process Safety Management (PSM) for highly hazardous chemicals — the prime regulation for chemical process industries.
• 29 CFR 1910.146 — confined spaces.
• 29 CFR 1910.147 — Lockout/Tagout (LOTO).
• 29 CFR 1910.178 — powered industrial trucks.
• 29 CFR 1910.212 — machine guarding.
• 29 CFR 1910.269 — electric power generation, transmission, and distribution.
• 29 CFR 1910 Subpart S — electrical safety; references NFPA 70E.
• 29 CFR 1926 — construction safety (fall protection, scaffolding, excavation).
• 29 CFR 1910.1200 — Hazard Communication, GHS-aligned since 2012.

NIOSH (National Institute for Occupational Safety and Health) — research arm under CDC; not regulatory but produces recommended exposure limits (RELs).

MSHA (Mine Safety and Health Administration), US DOL. Federal Mine Safety and Health Act 1977. Regulations: 30 CFR. Underground vs surface mine, coal vs metal/non-metal. Mandatory health and safety standards, training requirements (Part 48, 30 CFR), accident reporting.

International: EU-OSHA (European Agency for Safety and Health at Work, advisory). HSE UK (Health and Safety Executive, true regulator). EU Machinery Directive 2006/42/EC (now Machinery Regulation 2023/1230 from 14 Jan 2027) — CE marking of machinery, harmonized standards EN ISO 12100 + ISO 13849-1 + IEC 62061. WorkSafeBC, Canada provincial WSIB equivalents. China State Administration of Work Safety. Japan MHLW.

8. Medical devices — FDA + state + EU MDR

Food and Drug Administration (FDA), HHS. FDCA 1938 (as amended). Regulations: 21 CFR.

Medical-device-specific:

• 21 CFR Part 820 — Quality System Regulation (QSR), aligned with ISO 13485:2016 by the QMSR Final Rule effective February 2026.
• 21 CFR Part 803 — MDR (Medical Device Reporting).
• 21 CFR Part 806 — corrections + removals (recalls).
• 21 CFR Part 807 — establishment registration + device listing; 510(k) pre-market notification.
• 21 CFR Part 814 — PMA (Pre-market Approval) for Class III.
• 21 CFR Part 812 — IDE (Investigational Device Exemption) for clinical studies.
• De Novo classification (FDCA §513(f)(2)) — new low- or moderate-risk devices without predicate.
• Combination products — drug-device or biologic-device hybrids; CDER vs CDRH primary jurisdiction; 21 CFR Part 4.
• Software as Medical Device (SaMD) — IMDRF framework; FDA Pre-Cert pilot (paused 2022); AI/ML guidance documents and PCCP (Predetermined Change Control Plan) rulings finalized 2024.
• Cybersecurity — Section 524B of FDCA (Omnibus Dec 2022) — premarket cybersecurity required since March 2023; FDA Cybersecurity Final Guidance Sept 2023.
• Quality System Inspections — FDA inspectors, Form 483, Warning Letters, Consent Decrees.

International / regulatory equivalents:

• EU MDR (Reg 2017/745) replacing MDD 93/42/EEC. Effective 26 May 2021 with transitions. Class I-self-cert, IIa, IIb, III by Annex VIII. Notified Body required for IIa+. UDI (Unique Device Identification) via EUDAMED.
• EU IVDR (Reg 2017/746) — In-vitro diagnostics.
• ISO 13485:2016 — quality system; recognized by FDA QMSR, MDR, MDSAP.
• ISO 14971:2019 — risk management.
• IEC 62366 — usability engineering.
• IEC 62304 — medical-device software lifecycle (5 SIL classes).
• IEC 60601-1 + collateral + particular standards — electrical safety for medical equipment.
• MDSAP (Medical Device Single Audit Program) — Australia + Brazil + Canada + Japan + US single audit accepted; growing.
• Health Canada — MDR (SOR/98-282), Class I–IV.
• TGA Australia — Therapeutic Goods Act 1989.
• PMDA Japan — PMD Act 2014.
• NMPA China — replaced CFDA 2018.
• CDSCO India.
• ANVISA Brazil.

9. Pharmaceuticals — FDA, EMA, others

• CDER (Center for Drug Evaluation and Research, FDA) — drugs.
• CBER (Center for Biologics Evaluation and Research) — vaccines, blood, cell + gene therapy.
• EMA (European Medicines Agency) — centralized procedure, Amsterdam (post-Brexit move from London).
• PMDA Japan, NMPA China, MHRA UK, Health Canada (Health Products and Food Branch), TGA Australia, ANVISA Brazil, KMHW South Korea.
• ICH (International Council on Harmonisation) — Q (quality), S (safety), E (efficacy), M (multidisciplinary) guidelines adopted by all major regulators.

GMP for pharmaceuticals: 21 CFR Parts 210, 211 (drugs), 600s (biologics). EU GMP Annexes. PIC/S (Pharmaceutical Inspection Co-operation Scheme) — 56 participating regulators.

10. Consumer products — CPSC

Consumer Product Safety Commission, independent, Consumer Product Safety Act 1972. Authority: 15 USC ch. 47. Regulations: 16 CFR.

• Mandatory standards — children’s products (CPSIA 2008), cribs (16 CFR 1219), strollers, bike helmets (16 CFR 1203), pool drain covers (VGBA 2007).
• Recalls — voluntary cooperative or unilateral; coordinated through SaferProducts.gov.
• Third-party testing + CPSC-accepted laboratories under CPSIA.
• Lead and cadmium content in children’s products (CPSIA).
• Phthalates restrictions (16 CFR 1307).
• Recreational off-highway vehicles, ATVs (16 CFR 1420).

Adjacent: NHTSA on vehicles excluded; EPA on pesticides excluded; FDA on food/drug excluded; FCC on radio excluded. Where multiple agencies overlap (e.g., a battery-powered children’s toy), CPSC + FCC + CPSIA + Cal Prop 65 all apply.

11. Pipelines + hazmat — PHMSA

Pipeline and Hazardous Materials Safety Administration, US DOT. Authority: 49 USC ch. 51 (HMTA), ch. 601 (pipeline safety). Regulations: 49 CFR Parts 171-180 (hazmat), 190-199 (pipeline).

• Hazardous materials transport — packaging (49 CFR 178), shipping papers (172), labeling/marking (172), placarding (172), DOT spec containers (UN/DOT cylinders).
• Gas pipelines — 49 CFR Part 192 (gas), Part 193 (LNG).
• Liquid pipelines — 49 CFR Part 195 (hazardous liquids).
• Operator qualifications — Part 192/195 Subpart N.
• Integrity management — Part 192 Subpart O (gas), Part 195 Subpart F (liquids).
• One-call / 811 system (Part 198) — preventing third-party damage.

International: Transport Canada TDG, IMDG (maritime), IATA DGR (air), RID / ADR (rail / road in Europe), ADN (inland waterways).

12. Energy / electric grid — FERC, NERC, state PUCs

Federal Energy Regulatory Commission (FERC), independent. Federal Power Act 1935, Natural Gas Act 1938. Regulations: 18 CFR.

• Interstate transmission rates + open access (Order 888, 890, 1000, 2222 for DERs).
• Wholesale power markets — PJM, MISO, NYISO, ISO-NE, CAISO, SPP, ERCOT (note: ERCOT mostly outside FERC jurisdiction because intrastate).
• Natural gas pipelines — interstate, certificates of convenience.
• Hydropower licensing (FPA Part I).
• Reliability delegated to NERC.

North American Electric Reliability Corporation (NERC), industry-led, FERC-certified ERO under EPAct 2005 §215.

• CIP (Critical Infrastructure Protection) standards — CIP-002 to CIP-014, the bulk-electric-system cybersecurity baseline. Now mandatory + auditable; civil penalties up to \$1M/day per violation.
• TPL, FAC, IRO, TOP, EOP standards — transmission planning, facilities, interconnections, operations, emergency.
• Regional Entities — RF (ReliabilityFirst), Texas RE, SERC, WECC, MRO, NPCC.

State Public Utility Commissions — retail electric, gas, water rates; resource planning (IRPs); siting + line-extension authority. Examples: CPUC (California), PUCT (Texas), NYPSC (New York), MPSC (Michigan), Iowa Utilities Board.

International: ENTSO-E (European Network of TSOs), CEER (Council of European Energy Regulators), Ofgem UK. Australia AEMO + AER. China State Grid + NEA. India CERC + SERCs.

13. Rail — FRA + STB, CSA Canada, RSSB UK

Federal Railroad Administration (FRA), US DOT. 49 USC ch. 201. Regulations: 49 CFR Parts 200–299.

• Track safety Part 213.
• Locomotive safety Part 229.
• Air brakes Part 232.
• Passenger equipment safety Part 238.
• Positive Train Control (PTC) Part 236 Subpart I — mandated by RSIA 2008, implemented 2020.
• Hours of service Part 228.
• HAZMAT by rail Parts 171–179 + 49 CFR 174 cross-reference.

Surface Transportation Board (STB), independent. ICCTA 1995. Rate + service regulation; railroad mergers; abandonments. Less safety-focused than FRA.

Subway / urban rail: FTA (Federal Transit Administration, DOT) — State Safety Oversight (SSO) Final Rule 49 CFR Part 674.

International: Transport Canada Railway Safety Act. ORR (Office of Rail and Road) UK. ERA (European Union Agency for Railways) — TSIs (Technical Specifications for Interoperability) and ECMs (Entity in Charge of Maintenance). RSSB UK technical body. UIC (International Union of Railways).

14. Maritime — USCG, IMO

US Coast Guard (USCG), DHS. 14 USC, 46 USC. Regulations: 33 CFR (navigation/waterways) + 46 CFR (shipping).

• Vessel certification — Subchapter D (tank), F (drycargo), H (passenger), K (small passenger), L (offshore supply), M (uninspected commercial fishing), T (small passenger <100 GT).
• Subchapter M (towing vessels, 2018) — TPO (third-party organization) audits.
• Recreational boat manufacturers — Boat Safety Act 1971.
• OPA 90 spill response.
• Tonnage measurement, inspection.

International: IMO (International Maritime Organization, UN). SOLAS (Safety Of Life At Sea), MARPOL (marine pollution), STCW (training/certification/watchkeeping), MLC (Maritime Labour Convention). Classification societies — DNV (Norway), ABS (American Bureau of Shipping), Lloyd’s Register, BV (Bureau Veritas), ClassNK (Japan), CCS (China), KR (Korea), RINA (Italy), IRS (India), RS (Russia) — voluntary but de-facto required by underwriters and flag states.

15. Offshore oil + gas — BSEE, BOEM, USCG

Bureau of Safety and Environmental Enforcement (BSEE), DOI. Created from MMS reorganization post-Deepwater-Horizon (2011). 30 CFR 250 — operations on the OCS; SEMS (Safety and Environmental Management Systems).

Bureau of Ocean Energy Management (BOEM), DOI — leasing, exploration plans.

International: HSE Offshore UK (post-Buncefield + Macondo restructured); PSA (Petroleum Safety Authority) Norway; NEB / CER Canada Energy Regulator; NOPSEMA Australia; ANP Brazil. Standards: API specs + recommended practices (API Q1, API 6A, API 16D, API 17D, API RP 75); ISO 13628.

16. Firearms + explosives — ATF

Bureau of Alcohol, Tobacco, Firearms and Explosives, DOJ. Authority: GCA 1968 (Gun Control Act), NFA 1934, FOPA 1986, USA PATRIOT Act, organic explosives regulation. Federal Firearms License (FFL), Federal Explosives License/Permit (FEL/FEP). Regulations: 27 CFR Parts 478, 479, 555.

Engineering tie-in: design-and-build of firearms, suppressor manufacture, ammunition manufacture; explosives storage (27 CFR Part 555 Subpart K), pyrotechnics.

17. Food + agriculture — FSIS, APHIS, FDA

FSIS (Food Safety and Inspection Service), USDA — meat, poultry, processed egg products. FMIA (Federal Meat Inspection Act), PPIA (Poultry Products Inspection Act), EPIA (Egg Products Inspection Act). 9 CFR. HACCP, sanitation SOPs, plant pre-shipment inspection.

APHIS (Animal and Plant Health Inspection Service), USDA — animal/plant health, veterinary biologics, BRS (Biotechnology Regulatory Services — GE plants, animals), AC (Animal Care — AWA), select agents.

FDA Center for Food Safety and Applied Nutrition (CFSAN) — non-meat foods, dietary supplements, food contact substances, FSMA (Food Safety Modernization Act 2011) preventive controls.

18. Employment + labor — EEOC, NLRB, FMCS

EEOC (Equal Employment Opportunity Commission). Title VII, ADA, ADEA, GINA, Equal Pay Act. Charge filings, mediation, suit authorization.

NLRB (National Labor Relations Board) — union representation, ULPs under NLRA.

FMCS (Federal Mediation and Conciliation Service) — labor mediation.

OFCCP (Office of Federal Contract Compliance Programs) — affirmative action for federal contractors (E.O. 11246 + Section 503 + VEVRAA).

19. Measurement, cybersecurity standards — NIST

National Institute of Standards and Technology, DOC. NIST Organic Act. Not a regulator (no enforcement authority) but produces standards adopted by reference into many other regulations.

• NIST Cybersecurity Framework (CSF 2.0, Feb 2024) — adopted by reference in many DFARS and HIPAA Security Rule pathways.
• NIST SP 800-53 — security controls catalog.
• NIST SP 800-171 — controlled unclassified information (CUI) — incorporated into DFARS 252.204-7012 mandatory for DoD contractors.
• NIST SP 800-37, 800-39, 800-160 — RMF, risk management, secure engineering.
• FIPS 140-3 — cryptographic module validation; replaces FIPS 140-2 (sunset Sep 2026).
• NIST PQC — Post-Quantum Crypto standards (FIPS 203-205, Aug 2024) — government + critical-infrastructure mandate.
• SI base-unit definitions — kilogram, second, meter, ampere, kelvin, mole, candela. Realizations + traceability via NIST CMCs (Calibration and Measurement Capabilities) under CIPM MRA.
• NIST MEP (Manufacturing Extension Partnership) — non-regulatory but funded for SMM compliance assistance.

International measurement: BIPM (Bureau International des Poids et Mesures), Sèvres; NMIs (PTB Germany, NPL UK, NMIJ Japan, NIM China, KRISS Korea, NRC Canada, INMETRO Brazil, VNIIM Russia).

20. Defense + classified work — DCMA, DCAA, DCSA, DCSA, DARPA, AFRL

DCMA (Defense Contract Management Agency) — quality + delivery surveillance at the contractor; cost-plus contract oversight.

DCAA (Defense Contract Audit Agency) — audit cost.

DCSA (Defense Counterintelligence and Security Agency, replaces DSS) — industrial security clearance under NISPOM (32 CFR Part 117, replacing DoD 5220.22-M).

DFARS (Defense Federal Acquisition Regulation Supplement) — 252.204-7012 (CUI), 252.204-7019/7020/7021 (NIST 800-171 self-assessment), 252.204-7019 + CMMC 2.0 (Cybersecurity Maturity Model Certification, mandatory phase-in 2026+).

ITAR (International Traffic in Arms Regulations, 22 CFR 120-130, US DOS DDTC) — defense articles + services export. EAR (Export Administration Regulations, 15 CFR 730-774, US DOC BIS) — dual-use export. ECCN classifications. Restricted persons (denied parties, entity list, SDN). 2022+ semiconductor export controls.

21. Aerospace certifications + standards (recap, beyond FAA)

• DO-178C software (DAL A-E); supplement DO-330 tools, DO-331 model-based, DO-332 OOAD, DO-333 formal methods.
• DO-254 hardware (DAL A-E).
• DO-160G environmental (temperature, humidity, vibration, EMC, lightning).
• AS9100D quality management for aerospace (built on ISO 9001 + AS9101 audit + AS9102 first-article).
• NADCAP (National Aerospace and Defense Contractors Accreditation Program) — special processes (heat treat, welding, NDT, coatings) auditing.
• AS5553 counterfeit parts avoidance.
• AS13100 APQP for engines (jointly developed by GE, P&W, RR, Honeywell).

Space-specific: NASA Technical Standards (NASA-STD- series), ECSS (European Cooperation for Space Standardization), MIL-STD-1540 (DoD space vehicle test).

22. EU + UK — CE/UKCA, directives, regulators

CE marking — manufacturer’s declaration of conformity with applicable EU directives/regulations. Required for: low-voltage equipment (LVD 2014/35/EU), EMC (2014/30/EU), Machinery (2006/42/EC; replaced by 2023/1230 from Jan 2027), Radio Equipment (RED 2014/53/EU), Pressure Equipment (PED 2014/68/EU), Medical Devices (MDR), IVD (IVDR), Construction Products (CPR 305/2011, recast 2024), Toy Safety (2009/48/EC), Personal Protective Equipment (PPE 2016/425), ATEX (2014/34/EU explosive atmospheres), Lifts (2014/33/EU), GPSR (2023/988, general product safety, applicable 13 Dec 2024).

UKCA marking — UK conformity assessment post-Brexit; UK government extended indefinite acceptance of CE marking for most goods (Aug 2023 announcement) reducing UKCA practical importance.

Conformity-assessment infrastructure: Notified Bodies for Annex IV/V/VI procedures. UK: UKAS-accredited Approved Bodies. EU body lists in NANDO.

REACH (Registration, Evaluation, Authorisation, Restriction of Chemicals, Reg 1907/2006) — ECHA. Substances >1 t/y registered; SVHC candidate + authorisation list (Annex XIV); restriction list (Annex XVII). PFAS proposed broad restriction under consideration 2024–2026.

CLP/GHS (Reg 1272/2008) — classification, labeling, packaging hazard communication.

RoHS (2011/65/EU) — restriction of hazardous substances in EEE.

WEEE (2012/19/EU) — e-waste.

Eco-design Directive + ESPR (Eco-Design for Sustainable Products Regulation 2024) — digital product passport, repairability.

BREEAM (UK, BRE Global) — building environmental assessment.

BSI UK — British Standards Institution; publishes BS standards + UK national adoptions of EN/ISO.

Country-specific regulators: BAuA + ZLS Germany (machinery), TÜV (multiple TÜV Süd, Rheinland, Nord — Notified Body roles), Dekra Germany, IMQ Italy, INSPE Spain, AFNOR France certifier, SP Sweden, VDE Germany (electrotechnical).

23. Building codes — IBC, IRC, IECC, IPC, IMC, IFC family

International Code Council (ICC) “I-Codes” updated on 3-year cycle, current 2024 edition:

• IBC — International Building Code (commercial/multifamily).
• IRC — International Residential Code (1-2 family ≤3 stories).
• IECC — International Energy Conservation Code.
• IPC — International Plumbing Code.
• IMC — International Mechanical Code (HVAC, refrigeration).
• IFGC — International Fuel Gas Code.
• IFC — International Fire Code.
• IEBC — International Existing Building Code (renovation, change of occupancy).
• IPMC — International Property Maintenance Code.
• ISPSC — International Swimming Pool and Spa Code.
• IWUIC — International Wildland-Urban Interface Code.

NEC (NFPA 70) — National Electrical Code, NFPA Trustees, 3-year cycle (2023 current; 2026 next). NFPA 70E — workplace electrical safety.

Adopted state-by-state and local-by-local; California Title 24 is a substantial overlay. ICC publishes; AHJ (Authority Having Jurisdiction) adopts and enforces.

24. Voluntary consensus + accreditation bodies

• ANSI (American National Standards Institute) — accredits SDOs + represents US at ISO; doesn’t write standards itself.
• ANAB (ANSI National Accreditation Board, JV with ASQ) — accredits CABs.
• IAS (International Accreditation Service) — accredits product-certification bodies.
• NRTL (Nationally Recognized Testing Laboratory) — OSHA-recognized for safety-listed equipment (UL, ETL/Intertek, CSA, TÜV, etc.).

UL (Underwriters Laboratories): legacy product-safety listing organization; UL standards (UL 60950 / 62368-1 audiovisual+IT, UL 489 circuit breakers, UL 583 industrial trucks, UL 1973 stationary batteries, UL 9540A energy-storage thermal runaway, UL 1741 SA grid-tied inverters). Now corp. structure: UL Solutions (testing + listing), UL Standards & Engagement (standards), UL Research.

ETL / Intertek — UL-equivalent NRTL.

CSA Group (Canadian Standards Association) — Canadian SDO + NRTL + global testing; CSA marks accepted in Canada and many US/Mexico jurisdictions.

TÜV Rheinland / TÜV Süd / TÜV Nord — EU Notified Bodies + global testing labs; common for medical, machinery, automotive certifications.

DNV — classification society + standards + certification for offshore, oil + gas, automotive.

Bureau Veritas, Lloyd’s Register, SGS — global testing + certification.

25. International regulator catalog (selected)

Region	Civil aviation	Medical device	Vehicle	Pharma	Food	Workplace	Telecom
EU	EASA	EU MDR + EMA	UNECE WP.29 + EU 2018/858	EMA	EFSA	EU-OSHA + national	ETSI + national
UK	CAA UK	MHRA	DVSA + VCA	MHRA	FSA	HSE	OFCOM
Canada	TCCA	Health Canada	Transport Canada	Health Canada	CFIA	Provincial	ISED
Japan	JCAB	PMDA	MLIT + JMHLW	PMDA	MHLW	MHLW	MIC
China	CAAC	NMPA	CATARC + MIIT	NMPA	NHC + SAMR	SAWS	SRRC + MIIT
Korea	KOCA	MFDS	KATRI + KMOLIT	MFDS	MFDS	MOEL	KCC + RRA
India	DGCA	CDSCO	MoRTH + ARAI	CDSCO	FSSAI	DGFASLI	DoT + WPC
Brazil	ANAC	ANVISA	DENATRAN + ANP	ANVISA	ANVISA	MTb	ANATEL
Australia	CASA	TGA	DITRDCA + ADRs	TGA	FSANZ	SWA (Safe Work Aust.)	ACMA
Saudi Arabia	GACA	SFDA	SASO + MoT	SFDA	SFDA	Min. of HR + SD	CST

How to use this catalog

• For an engineering project, identify the regulated activity (aircraft type-cert, building permit, drug approval, …) and the jurisdiction, then locate the responsible body in this catalog.
• Use standards-bodies for the SDO that publishes the technical content the regulator points at.
• Use engineering-codes for the code documents themselves organized by discipline.
• For ITAR / EAR / sanctions compliance, identify all nations of involvement plus end-use + end-user before sharing technical data.
• Don’t assume harmonization. Even where standards are nominally identical (ISO 13485 vs FDA QSR), the regulatory regime, inspection cadence, and recordkeeping requirements differ.

Cross-references

• standards-bodies — the SDOs that publish standards (ISO, IEC, ASTM, IEEE, ASME, NFPA, ASHRAE, SAE, AWS).
• engineering-codes — codes by discipline (IBC, BPVC, NEC, FAR, MDR, etc.).
• cybersecurity-engineering — for NIST CSF, ISO 27001, IEC 62443 industrial cybersecurity.
• quality-systems-iso9001 — ISO 9001, IATF 16949, AS9100, ISO 13485 quality systems.
• reliability-engineering — FMEA, FTA, IEC 61508 functional safety, ISO 26262 ASIL.
• nuclear-engineering — NRC, IAEA, NQA-1, ASME Section III.
• structural-fire-engineering — IBC fire-resistance, NFPA 5000, EN 1991-1-2.
• environmental-engineering — EPA, NPDES, RCRA, Clean Air Act.
• hvac-fundamentals — ASHRAE, IMC, IECC tie-ins.
• pharma-process-engineering — FDA cGMP, EU GMP Annex 1 sterile, ICH guidelines.
• units-conversions — NIST SI definitions, BIPM.