Frameworks
13 frameworks. 293 clauses, each one cited.
Each framework is a table of the clauses one cluster's records can speak to, in the instrument's own numbering. The clauses a cluster cannot answer are marked outside scope with the reason, not stretched to fit.
SOC 2 (Trust Services Criteria)
AICPA TSP section 100 (2017, revised 2022)
13 clauses · 11 assessed · 2 outside scope
EU Cyber Resilience Act and NIS2
Regulation (EU) 2024/2847 · Directive (EU) 2022/2555
34 clauses · 26 assessed · 8 outside scope
DORA (Digital Operational Resilience Act)
Regulation (EU) 2022/2554
22 clauses · 15 assessed · 7 outside scope
NIST SP 800-190 (Application Container Security)
NIST SP 800-190
15 clauses · 11 assessed · 4 outside scope
NIST SP 800-218 (SSDF v1.1)
NIST SP 800-218 v1.1
13 clauses · 11 assessed · 2 outside scope
NIST SP 800-53 Rev. 5 (selected controls)
NIST SP 800-53 Rev. 5
15 clauses · 15 assessed · 0 outside scope
ISO/IEC 27001:2022 (Annex A)
ISO/IEC 27001:2022
12 clauses · 10 assessed · 2 outside scope
GDPR Article 32
Regulation (EU) 2016/679
6 clauses · 4 assessed · 2 outside scope
PCI DSS v4.0.1 (Requirements 6 and 11)
PCI Security Standards Council, Payment Card Industry Data Security Standard, version 4.0.1 (June 2024)
13 clauses · 8 assessed · 5 outside scope
MAS Technology Risk Management Guidelines (2021)
Monetary Authority of Singapore, 18 January 2021
30 clauses · 19 assessed · 11 outside scope
ASD Essential Eight Maturity Model (November 2023)
Australian Signals Directorate, last updated November 2023
46 clauses · 38 assessed · 8 outside scope
Control Criteria of ISMAP (August 2024)
ISMAP Steering Committee; Japanese edition last revised 1 August 2024; English reference translation last revised 22 September 2023, attached tables matching the 2024 edition
42 clauses · 24 assessed · 18 outside scope
ISMS-P Certification Criteria (November 2023)
정보보호 및 개인정보보호 관리체계 인증기준 (Annex 7 of the joint notification of the Personal Information Protection Commission and the Ministry of Science and ICT), as explained in KISA's 인증기준 안내서 of November 2023
32 clauses · 21 assessed · 11 outside scope
How it works
One set of records, read against any of them.
- Shipped with the operatorThe mapping is not fetched, so an air-gapped cluster reports what a connected one does.
- Same question, same answerWhere two frameworks ask the same thing, the same statement about the period answers both, so two reports cannot disagree.
- Translations say soISMAP and ISMS-P are quoted from translations, and each citation names its source text.
- On every planCommunity and Team include one framework of your choice, Business three, Enterprise all of them. Pricing
Install it yourself.
Create an account, confirm your e-mail with the code we send, take the free Community key from the Licenses page, and install with Helm.
Create an account