Governance Frameworks

Framework Overview

Framework Name Version Domain Status Actions
Domain: Information Security & Risk
ISO 27001 Information Security Management System (ISMS) 2022 Information Security & Risk Active
NIST CSF Cybersecurity Framework 2.0 Information Security & Risk Active
NIST SP 800-53 Security & privacy controls for federal agencies Rev. 5 Information Security & Risk Active
COBIT 2019 Governance & management of IT 2019 Information Security & Risk Active
CSA CCM Cloud security control matrix 4.0 Information Security & Risk Active
Domain: Privacy & Data Protection
GDPR EU data protection regulation 2016/679 Privacy & Data Protection Active
CCPA California Consumer Privacy Act 2018 Privacy & Data Protection Active
DPDP Act India's Digital Personal Data Protection Act 2023 Privacy & Data Protection Active
HIPAA/HITECH US healthcare data protection 1996 Privacy & Data Protection Active
Domain: Financial & Corporate Compliance
SOX Sarbanes-Oxley Act for financial reporting 2002 Financial & Corporate Compliance Active
PCI-DSS Payment card industry data security 4.0 Financial & Corporate Compliance Active
Basel Framework Banking supervision standards Basel III Financial & Corporate Compliance Active
IFRS International Financial Reporting Standards Current Financial & Corporate Compliance Active
Domain: Quality & Operational Management
ISO 9001:2015(E) Quality Management Systems (QMS) 2015 Quality & Operational Management Active
ISO 14001 Environmental management 2015 Quality & Operational Management Active
ISO 45001 Occupational health & safety 2018 Quality & Operational Management Active
ISO 50001 Energy management 2018 Quality & Operational Management Active
AS9100 Aerospace quality management Rev D Quality & Operational Management Active
Domain: Emerging & Specialized
SOC 2 Service organization controls Type II Emerging & Specialized Active
FedRAMP US government cloud compliance Rev. 5 Emerging & Specialized Active
FISMA Federal Information Security Management Act 2014 Emerging & Specialized Active
EU AI Act Artificial intelligence regulation 2024 Emerging & Specialized Active
ISO 42001 AI management system standard 2023 Emerging & Specialized Active