COMPLIANCE FRAMEWORKS

[srpatcha]

==================================================

1. SECURITY, CYBERSECURITY AND ASSURANCE

==================================================

1. SOC 2
2. ISO 27001
3. CMMC
4. PCI DSS
5. FedRAMP
6. HITRUST
7. TISAX
8. CIS Controls
9. Cyber Essentials
10. Cyber Fundamentals
11. NIST SP 800-171
12. NIST SP 800-53
13. NIST Cybersecurity Framework (NIST CSF 2.0)
14. NIS 2
15. NYDFS
16. UK Cyber Essentials
17. ACSC Essential Eight

==================================================

2. AI GOVERNANCE AND AI SECURITY

==================================================

18. ISO 42001
19. NIST AI Risk Management Framework (NIST AI RMF)
20. AIUC-1

==================================================

3. PRIVACY AND DATA PROTECTION

==================================================

21. GDPR
22. CCPA
23. ISO 27701
24. ISO 27018
25. ISO 27017
26. HIPAA

==================================================

4. OPERATIONAL RESILIENCE, IT GOVERNANCE

AND FINANCIAL COMPLIANCE ===========================
27. DORA
28. CSA Cloud Controls Matrix (CSA CCM)
29. COBIT 2019
30. FFIEC
31. SOX IT General Controls (SOX ITGC)
32. APRA CPS 230

==================================================

5. SUPPLIER AND TECHNOLOGY-SPECIFIC COMPLIANCE

==================================================

33. Microsoft SSPA
34. EU Cyber Resilience Act (EU CRA)
35. Custom Framework
36. Request a New Framework

==================================================

6. ADDITIONAL FRAMEWORKS AND VERSIONS

DOCUMENTED IN DRATA HELP RESOURCES ================

37. CMMC 2.0
38. ISO 27001:2013
39. ISO 27001:2022
40. ISO 27701:2019
41. ISO 27017:2015
42. NIST SP 800-171 Revision 2
43. NIST SP 800-171 Revision 3
44. PCI DSS v3.2.1
45. PCI DSS v4.0
46. PCI DSS v4.0.1
47. NIST CSF 1.1
48. NIST SP 800-53 Revision 5
49. CIS 8.1
50. Cyber Essentials v3.2
51. FedRAMP 20x
52. Drata Essentials

==================================================

7. RECOMMENDED FRAMEWORKS FOR EMBEDDEDOS

==================================================

53. ISO 27001 — Information Security Management
54. ISO 42001 — AI Management System
55. NIST AI RMF — AI Risk Management
56. ISO 22301 — Business Continuity
57. SOC 2 — Service Organization Controls
58. ISO 9001 — Quality Management
59. ISO 27701 — Privacy Management
60. ISO 27017 — Cloud Security
61. CIS Controls — Cybersecurity Safeguards
62. EU CRA — Product Cybersecurity
63. IEC 62443 — Industrial Automation Security
64. ISO 26262 — Automotive Functional Safety