What Compliance Frameworks are supported?
We currently support the following compliance frameworks:
- PCI-DSS v3.2.1: Payment Card Industry Data Security Standard
- PCI-DSS v4.0: Payment Card Industry Data Security Standard
- ISO/IEC 27001:2013: Information Security Management System (ISMS) Standard
- ISO/IEC 27001:2022: Information Security Management System (ISMS) Standard
- NIST SP 800-53 Rev. 4: Security and Privacy Controls for Federal Information Systems and Organizations
- CIS Controls v7.1: Center for Internet Security Critical Security Controls
- CIS Controls v8: Center for Internet Security Critical Security Controls
- SAMA CSF v1.0: Saudi Arabian Monetary Authority Cybersecurity Framework
- NCA-ECC v1:2018: National Cybersecurity Authority Essential Cybersecurity Controls
- EU DORA (REGULATION (EU) 2022/2554): Digital Operational Resilience Act
- EU NIS2 Directive: Directive on Security of Network and Information Systems
- UK Cyber Essentials v3.1: Cyber Essentials Requirements for IT Infrastructure
- HIPAA: Health Insurance Portability and Accountability Act