Frameworks
Built on the standards you answer to
Framework mappings are provided to support your program. Whether you meet a standard is for you and your auditor to decide.
Mapped today
MappedSOC 2
SOC 2 (AICPA Trust Services Criteria)
Every SOC 2 criterion (51) is mapped, clause by clause.
HIPAA
HIPAA (Security, Privacy and Breach Notification Rules)
66 of 68 Security, Privacy and Breach Notification items are addressed in the library. The other 2 are excluded, with reasons recorded.
ISO 27001
ISO/IEC 27001:2022
Every ISO 27001 Annex A control (93) is mapped, clause by clause.
NIST 800-53
NIST SP 800-53
NIST 800-53 is cited on each requirement.
GDPR
EU General Data Protection Regulation
GDPR is cited on each requirement.
More frameworks
- PCI DSS
- HITRUST
- FedRAMP
- CMMC
- ISO 42001
- NIST AI RMF
- NIS2
Not sure where to start?
Tell us about your organization and we will point you to the right path.