Every Framework Your Regulators and Customers Require, Built In

ISO 27001

International standard for managing information security across organizations and their vendor ecosystems. 

SOC 2

AICPA trust services framework governing security, availability, and confidentiality of customer data.

PCI DSS

Global payment card security standard mandating controls for organizations that handle cardholder data.

NIST CSF

US framework providing a risk-based approach to identifying, protecting, and recovering from cyber threats.

SWIFT CSP

Security baseline for financial institutions on the SWIFT network to protect against cyber fraud and interbank threats. 

GDPR

EU regulation governing personal data protection and privacy rights for individuals across member states.

DORA

EU law requiring financial entities to manage third-party ICT risk and ensure operational resilience.

NIS2

Updated EU directive expanding cybersecurity obligations across critical sectors and their supply chains.

CRA

EU Cyber Resilience Act setting mandatory cybersecurity requirements for products with digital elements.

CBK CORF

Kuwait's central bank operational risk framework governing financial institutions and their third-party exposures.

HIPAA

US law protecting patient health information and setting data privacy standards for healthcare vendors.

CCPA

California's data privacy law giving consumers rights over personal information collected by businesses.

CMMC

US DoD cybersecurity certification framework required for defense contractors and their supply chain vendors.

MAS TRM

Monetary Authority of Singapore's guidelines for managing technology and third-party risk in financial institutions.

RBI

Reserve Bank of India's outsourcing and IT risk guidelines for regulated financial entities and their vendors.

DPDP

India's Digital Personal Data Protection Act regulating the collection, processing, and transfer of personal data.

PDPA Singapore

Singapore's data protection law governing how organizations collect, use, and disclose personal data.

PDPA Thailand

Thailand's personal data protection law aligning with global privacy standards for businesses operating in the country.

PDPA Malaysia

Malaysia's data protection framework regulating the processing of personal data in commercial transactions.

BSP

Bangko Sentral ng Pilipinas framework governing IT risk and operational resilience for Philippine financial institutions.