40+ frameworks, one assessment
Assess once and prove against every framework that matters in your sector, from a single set of evidence. 1,534+ SCF controls mapped across them all.
International standards
- NIST CSF 2.0
- ISO 27001:2022
- ISO 27002:2022
- ISO 27017
- ISO 27018
- ISO 27701
- ISO 22301
- ISO 42001:2023
- CIS Controls v8
- CSA CCM v4
- SOC 2
- PCI DSS 4.0.1
- OWASP Top 10
- OWASP ASVS
- COBIT 2019
- COSO 2013
- Essential Eight
European Union
- NIS2
- DORA
- GDPR
- Cyber Resilience Act (CRA)
- EU AI Act
Canada & Quebec
- Quebec Law 25
- PIPEDA
- CPCSC / PCCC (ITSP.10.171)
- OSFI B-13
United States
- NIST SP 800-53 rev5
- NIST SP 800-171 rev3
- CMMC 2.0
- FedRAMP rev5
- NIST Privacy Framework
- CCPA / CPRA
- HIPAA Security Rule
- SOX (302 & 404)
Sector, OT & AI
- IEC 62443
- NIST SP 800-82 rev3
- NERC CIP
- TISAX
- SWIFT CSCF v2025
- IMO (maritime)
- NIST AI RMF
- NIST AI 600-1
- Vendor Due Diligence
Frequently asked questions
What is the full list of the 40+ frameworks covered?
NIST CSF 2.0, NIST SP 800-53 rev5, ISO 27001:2022, ISO 27002:2022, ISO 27017, ISO 27018, ISO 27701, ISO 22301, ISO 42001:2023, CIS Controls v8, CSA CCM v4, SOC 2, PCI DSS 4.0.1, OWASP Top 10, OWASP ASVS, COBIT 2019, COSO 2013, Essential Eight, NIS2, DORA, GDPR, Cyber Resilience Act (CRA), EU AI Act, Quebec Law 25, PIPEDA, CPCSC (ITSP.10.171), OSFI B-13, FedRAMP rev5, NIST SP 800-171 rev3, CMMC 2.0, NIST Privacy Framework, CCPA/CPRA, HIPAA Security Rule, SOX (sections 302 and 404), IEC 62443, NIST SP 800-82 rev3, NERC CIP, TISAX, SWIFT CSCF v2025, IMO maritime cyber guidelines, NIST AI RMF, NIST AI 600-1 and Vendor Due Diligence. All of them are mapped to the SCF (Secure Controls Framework).
How does one assessment cover 40+ frameworks?
Every framework is mapped to the SCF (Secure Controls Framework) 2026.2.2 and its 1,534+ controls. Validate a control once and its equivalents are marked across every related framework, with documented, auditable mappings.
At what level of detail are frameworks covered?
At each publisher's official grain: clauses and annex for ISO 27001, safeguards for CIS v8, points of focus for SOC 2, requirements and appendices for PCI DSS 4.0.1, article paragraphs for EU regulations such as DORA, GDPR and the CRA. Content is updated at every official revision.
Prove 40+ frameworks from a single assessment.
We will map your existing controls to every framework you need.
Request a demo