Crosswalk explorer
The same work, described 27 ways
Compliance frameworks overlap enormously. They describe the same security realities in different words. Keel is built on one crosswalked control library, so a control you implement once counts toward every framework it satisfies. The numbers below aren’t a marketing estimate: each is the count of canonical Keel controls that map to both frameworks, computed straight from our authored crosswalks and guarded by a test in our codebase.
A quick note on what these counts mean: they’re the shared canonical controls in Keel’s starter library (the reusable work), not each framework’s total clause count. See any framework’s full authored control count on its framework page.
Shared controls at a glance
| ISO/IEC 27001 | FedRAMP Rev5 Class D | FedRAMP Rev5 Class C | NIST SP 800-53 | FedRAMP Rev5 Class B | GDPR | NIST Cybersecurity Framework | SOC 2 | ISO 9001 | NIST SP 800-171 | ISO/IEC 42001 | PCI DSS | ESG Essentials | CIS Critical Security Controls | SOX (Sarbanes-Oxley) Section 404 | HIPAA | PIPEDA | FedRAMP 20x | NIST AI Risk Management Framework | AI Governance Essentials | FedRAMP Consolidated Rules | EU AI Act | COPPA | US Employment Law - Federal Baseline | Apple App Store Kids Category | Google Play Families | Amazon Appstore Child-Directed Apps | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ISO/IEC 27001 | Same framework | 55 | 53 | 52 | 41 | 19 | 45 | 32 | 16 | 35 | 16 | 27 | 6 | 32 | 24 | 24 | 12 | 25 | 2 | 1 | 12 | 0 | 11 | 2 | 0 | 0 | 0 |
| FedRAMP Rev5 Class D | 55 | Same framework | 64 | 60 | 50 | 17 | 35 | 24 | 3 | 40 | 2 | 30 | 4 | 35 | 20 | 24 | 10 | 25 | 1 | 0 | 12 | 0 | 11 | 2 | 0 | 0 | 0 |
| FedRAMP Rev5 Class C | 53 | 64 | Same framework | 60 | 50 | 17 | 34 | 23 | 3 | 40 | 2 | 30 | 4 | 34 | 20 | 24 | 10 | 25 | 1 | 0 | 12 | 0 | 11 | 2 | 0 | 0 | 0 |
| NIST SP 800-53 | 52 | 60 | 60 | Same framework | 49 | 17 | 33 | 24 | 4 | 41 | 3 | 29 | 4 | 30 | 21 | 23 | 10 | 25 | 1 | 0 | 12 | 0 | 11 | 2 | 0 | 0 | 0 |
| FedRAMP Rev5 Class B | 41 | 50 | 50 | 49 | Same framework | 17 | 32 | 22 | 3 | 36 | 2 | 28 | 4 | 27 | 19 | 21 | 10 | 22 | 1 | 0 | 12 | 0 | 11 | 2 | 0 | 0 | 0 |
| GDPR | 19 | 17 | 17 | 17 | 17 | Same framework | 17 | 22 | 1 | 14 | 0 | 15 | 4 | 12 | 14 | 16 | 22 | 12 | 1 | 1 | 4 | 0 | 13 | 2 | 2 | 1 | 0 |
| NIST Cybersecurity Framework | 45 | 35 | 34 | 33 | 32 | 17 | Same framework | 26 | 10 | 22 | 10 | 20 | 4 | 19 | 20 | 18 | 9 | 21 | 2 | 1 | 10 | 0 | 10 | 1 | 0 | 0 | 0 |
| SOC 2 | 32 | 24 | 23 | 24 | 22 | 22 | 26 | Same framework | 7 | 20 | 5 | 19 | 8 | 15 | 27 | 20 | 19 | 15 | 0 | 1 | 7 | 0 | 11 | 2 | 0 | 0 | 0 |
| ISO 9001 | 16 | 3 | 3 | 4 | 3 | 1 | 10 | 7 | Same framework | 2 | 17 | 1 | 6 | 1 | 6 | 4 | 2 | 4 | 1 | 1 | 1 | 0 | 2 | 0 | 0 | 0 | 0 |
| NIST SP 800-171 | 35 | 40 | 40 | 41 | 36 | 14 | 22 | 20 | 2 | Same framework | 2 | 25 | 1 | 25 | 17 | 18 | 8 | 18 | 0 | 0 | 10 | 0 | 9 | 2 | 0 | 0 | 0 |
| ISO/IEC 42001 | 16 | 2 | 2 | 3 | 2 | 0 | 10 | 5 | 17 | 2 | Same framework | 0 | 1 | 0 | 5 | 2 | 0 | 3 | 14 | 13 | 1 | 8 | 1 | 0 | 0 | 0 | 0 |
| PCI DSS | 27 | 30 | 30 | 29 | 28 | 15 | 20 | 19 | 1 | 25 | 0 | Same framework | 3 | 22 | 16 | 18 | 9 | 19 | 0 | 0 | 8 | 0 | 10 | 2 | 0 | 0 | 0 |
| ESG Essentials | 6 | 4 | 4 | 4 | 4 | 4 | 4 | 8 | 6 | 1 | 1 | 3 | Same framework | 2 | 7 | 4 | 6 | 2 | 1 | 1 | 0 | 0 | 2 | 5 | 0 | 0 | 0 |
| CIS Critical Security Controls | 32 | 35 | 34 | 30 | 27 | 12 | 19 | 15 | 1 | 25 | 0 | 22 | 2 | Same framework | 13 | 16 | 8 | 19 | 0 | 0 | 9 | 0 | 8 | 1 | 0 | 0 | 0 |
| SOX (Sarbanes-Oxley) Section 404 | 24 | 20 | 20 | 21 | 19 | 14 | 20 | 27 | 6 | 17 | 5 | 16 | 7 | 13 | Same framework | 16 | 9 | 15 | 0 | 1 | 6 | 0 | 9 | 1 | 0 | 0 | 0 |
| HIPAA | 24 | 24 | 24 | 23 | 21 | 16 | 18 | 20 | 4 | 18 | 2 | 18 | 4 | 16 | 16 | Same framework | 15 | 14 | 0 | 0 | 5 | 0 | 10 | 2 | 0 | 0 | 0 |
| PIPEDA | 12 | 10 | 10 | 10 | 10 | 22 | 9 | 19 | 2 | 8 | 0 | 9 | 6 | 8 | 9 | 15 | Same framework | 7 | 0 | 1 | 3 | 0 | 6 | 1 | 0 | 0 | 0 |
| FedRAMP 20x | 25 | 25 | 25 | 25 | 22 | 12 | 21 | 15 | 4 | 18 | 3 | 19 | 2 | 19 | 15 | 14 | 7 | Same framework | 1 | 0 | 9 | 0 | 8 | 1 | 0 | 0 | 0 |
| NIST AI Risk Management Framework | 2 | 1 | 1 | 1 | 1 | 1 | 2 | 0 | 1 | 0 | 14 | 0 | 1 | 0 | 0 | 0 | 0 | 1 | Same framework | 13 | 0 | 6 | 0 | 0 | 0 | 0 | 0 |
| AI Governance Essentials | 1 | 0 | 0 | 0 | 0 | 1 | 1 | 1 | 1 | 0 | 13 | 0 | 1 | 0 | 1 | 0 | 1 | 0 | 13 | Same framework | 0 | 9 | 0 | 0 | 0 | 0 | 0 |
| FedRAMP Consolidated Rules | 12 | 12 | 12 | 12 | 12 | 4 | 10 | 7 | 1 | 10 | 1 | 8 | 0 | 9 | 6 | 5 | 3 | 9 | 0 | 0 | Same framework | 0 | 3 | 0 | 0 | 0 | 0 |
| EU AI Act | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 8 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 6 | 9 | 0 | Same framework | 0 | 0 | 0 | 0 | 0 |
| COPPA | 11 | 11 | 11 | 11 | 11 | 13 | 10 | 11 | 2 | 9 | 1 | 10 | 2 | 8 | 9 | 10 | 6 | 8 | 0 | 0 | 3 | 0 | Same framework | 1 | 6 | 5 | 3 |
| US Employment Law - Federal Baseline | 2 | 2 | 2 | 2 | 2 | 2 | 1 | 2 | 0 | 2 | 0 | 2 | 5 | 1 | 1 | 2 | 1 | 1 | 0 | 0 | 0 | 0 | 1 | Same framework | 0 | 0 | 0 |
| Apple App Store Kids Category | 0 | 0 | 0 | 0 | 0 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 6 | 0 | Same framework | 7 | 4 |
| Google Play Families | 0 | 0 | 0 | 0 | 0 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 5 | 0 | 7 | Same framework | 5 |
| Amazon Appstore Child-Directed Apps | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 3 | 0 | 4 | 5 | Same framework |
Each cell is the number of canonical Keel controls shared by the two frameworks. Click a number to see exactly which controls, and the clauses they satisfy on each side.
Every overlapping pair
- FedRAMP Rev5 Class C and FedRAMP Rev5 Class D 64 shared
- FedRAMP Rev5 Class C and NIST SP 800-53 60 shared
- FedRAMP Rev5 Class D and NIST SP 800-53 60 shared
- FedRAMP Rev5 Class D and ISO/IEC 27001 55 shared
- FedRAMP Rev5 Class C and ISO/IEC 27001 53 shared
- ISO/IEC 27001 and NIST SP 800-53 52 shared
- FedRAMP Rev5 Class B and FedRAMP Rev5 Class C 50 shared
- FedRAMP Rev5 Class B and FedRAMP Rev5 Class D 50 shared
- FedRAMP Rev5 Class B and NIST SP 800-53 49 shared
- ISO/IEC 27001 and NIST Cybersecurity Framework 45 shared
- FedRAMP Rev5 Class B and ISO/IEC 27001 41 shared
- NIST SP 800-171 and NIST SP 800-53 41 shared
- FedRAMP Rev5 Class C and NIST SP 800-171 40 shared
- FedRAMP Rev5 Class D and NIST SP 800-171 40 shared
- FedRAMP Rev5 Class B and NIST SP 800-171 36 shared
- CIS Critical Security Controls and FedRAMP Rev5 Class D 35 shared
- FedRAMP Rev5 Class D and NIST Cybersecurity Framework 35 shared
- ISO/IEC 27001 and NIST SP 800-171 35 shared
- CIS Critical Security Controls and FedRAMP Rev5 Class C 34 shared
- FedRAMP Rev5 Class C and NIST Cybersecurity Framework 34 shared
- NIST SP 800-53 and NIST Cybersecurity Framework 33 shared
- CIS Critical Security Controls and ISO/IEC 27001 32 shared
- FedRAMP Rev5 Class B and NIST Cybersecurity Framework 32 shared
- ISO/IEC 27001 and SOC 2 32 shared
- CIS Critical Security Controls and NIST SP 800-53 30 shared
- FedRAMP Rev5 Class C and PCI DSS 30 shared
- FedRAMP Rev5 Class D and PCI DSS 30 shared
- NIST SP 800-53 and PCI DSS 29 shared
- FedRAMP Rev5 Class B and PCI DSS 28 shared
- CIS Critical Security Controls and FedRAMP Rev5 Class B 27 shared
- ISO/IEC 27001 and PCI DSS 27 shared
- SOC 2 and SOX (Sarbanes-Oxley) Section 404 27 shared
- NIST Cybersecurity Framework and SOC 2 26 shared
- CIS Critical Security Controls and NIST SP 800-171 25 shared
- FedRAMP 20x and FedRAMP Rev5 Class C 25 shared
- FedRAMP 20x and FedRAMP Rev5 Class D 25 shared
- FedRAMP 20x and ISO/IEC 27001 25 shared
- FedRAMP 20x and NIST SP 800-53 25 shared
- NIST SP 800-171 and PCI DSS 25 shared
- FedRAMP Rev5 Class C and HIPAA 24 shared
- FedRAMP Rev5 Class D and HIPAA 24 shared
- FedRAMP Rev5 Class D and SOC 2 24 shared
- HIPAA and ISO/IEC 27001 24 shared
- ISO/IEC 27001 and SOX (Sarbanes-Oxley) Section 404 24 shared
- NIST SP 800-53 and SOC 2 24 shared
- FedRAMP Rev5 Class C and SOC 2 23 shared
- HIPAA and NIST SP 800-53 23 shared
- CIS Critical Security Controls and PCI DSS 22 shared
- FedRAMP 20x and FedRAMP Rev5 Class B 22 shared
- FedRAMP Rev5 Class B and SOC 2 22 shared
- GDPR and PIPEDA 22 shared
- GDPR and SOC 2 22 shared
- NIST SP 800-171 and NIST Cybersecurity Framework 22 shared
- FedRAMP 20x and NIST Cybersecurity Framework 21 shared
- FedRAMP Rev5 Class B and HIPAA 21 shared
- NIST SP 800-53 and SOX (Sarbanes-Oxley) Section 404 21 shared
- FedRAMP Rev5 Class C and SOX (Sarbanes-Oxley) Section 404 20 shared
- FedRAMP Rev5 Class D and SOX (Sarbanes-Oxley) Section 404 20 shared
- HIPAA and SOC 2 20 shared
- NIST SP 800-171 and SOC 2 20 shared
- NIST Cybersecurity Framework and PCI DSS 20 shared
- NIST Cybersecurity Framework and SOX (Sarbanes-Oxley) Section 404 20 shared
- CIS Critical Security Controls and FedRAMP 20x 19 shared
- CIS Critical Security Controls and NIST Cybersecurity Framework 19 shared
- FedRAMP 20x and PCI DSS 19 shared
- FedRAMP Rev5 Class B and SOX (Sarbanes-Oxley) Section 404 19 shared
- GDPR and ISO/IEC 27001 19 shared
- PCI DSS and SOC 2 19 shared
- PIPEDA and SOC 2 19 shared
- FedRAMP 20x and NIST SP 800-171 18 shared
- HIPAA and NIST SP 800-171 18 shared
- HIPAA and NIST Cybersecurity Framework 18 shared
- HIPAA and PCI DSS 18 shared
- FedRAMP Rev5 Class B and GDPR 17 shared
- FedRAMP Rev5 Class C and GDPR 17 shared
- FedRAMP Rev5 Class D and GDPR 17 shared
- GDPR and NIST SP 800-53 17 shared
- GDPR and NIST Cybersecurity Framework 17 shared
- ISO/IEC 42001 and ISO 9001 17 shared
- NIST SP 800-171 and SOX (Sarbanes-Oxley) Section 404 17 shared
- CIS Critical Security Controls and HIPAA 16 shared
- GDPR and HIPAA 16 shared
- HIPAA and SOX (Sarbanes-Oxley) Section 404 16 shared
- ISO/IEC 27001 and ISO/IEC 42001 16 shared
- ISO/IEC 27001 and ISO 9001 16 shared
- PCI DSS and SOX (Sarbanes-Oxley) Section 404 16 shared
- CIS Critical Security Controls and SOC 2 15 shared
- FedRAMP 20x and SOC 2 15 shared
- FedRAMP 20x and SOX (Sarbanes-Oxley) Section 404 15 shared
- GDPR and PCI DSS 15 shared
- HIPAA and PIPEDA 15 shared
- FedRAMP 20x and HIPAA 14 shared
- GDPR and NIST SP 800-171 14 shared
- GDPR and SOX (Sarbanes-Oxley) Section 404 14 shared
- ISO/IEC 42001 and NIST AI Risk Management Framework 14 shared
- AI Governance Essentials and ISO/IEC 42001 13 shared
- AI Governance Essentials and NIST AI Risk Management Framework 13 shared
- CIS Critical Security Controls and SOX (Sarbanes-Oxley) Section 404 13 shared
- COPPA and GDPR 13 shared
- CIS Critical Security Controls and GDPR 12 shared
- FedRAMP 20x and GDPR 12 shared
- FedRAMP Rev5 Class B and FedRAMP Consolidated Rules 12 shared
- FedRAMP Rev5 Class C and FedRAMP Consolidated Rules 12 shared
- FedRAMP Rev5 Class D and FedRAMP Consolidated Rules 12 shared
- FedRAMP Consolidated Rules and ISO/IEC 27001 12 shared
- FedRAMP Consolidated Rules and NIST SP 800-53 12 shared
- ISO/IEC 27001 and PIPEDA 12 shared
- COPPA and FedRAMP Rev5 Class B 11 shared
- COPPA and FedRAMP Rev5 Class C 11 shared
- COPPA and FedRAMP Rev5 Class D 11 shared
- COPPA and ISO/IEC 27001 11 shared
- COPPA and NIST SP 800-53 11 shared
- COPPA and SOC 2 11 shared
- COPPA and HIPAA 10 shared
- COPPA and NIST Cybersecurity Framework 10 shared
- COPPA and PCI DSS 10 shared
- FedRAMP Rev5 Class B and PIPEDA 10 shared
- FedRAMP Rev5 Class C and PIPEDA 10 shared
- FedRAMP Rev5 Class D and PIPEDA 10 shared
- FedRAMP Consolidated Rules and NIST SP 800-171 10 shared
- FedRAMP Consolidated Rules and NIST Cybersecurity Framework 10 shared
- ISO/IEC 42001 and NIST Cybersecurity Framework 10 shared
- ISO 9001 and NIST Cybersecurity Framework 10 shared
- NIST SP 800-53 and PIPEDA 10 shared
- AI Governance Essentials and EU AI Act 9 shared
- CIS Critical Security Controls and FedRAMP Consolidated Rules 9 shared
- COPPA and NIST SP 800-171 9 shared
- COPPA and SOX (Sarbanes-Oxley) Section 404 9 shared
- FedRAMP 20x and FedRAMP Consolidated Rules 9 shared
- NIST Cybersecurity Framework and PIPEDA 9 shared
- PCI DSS and PIPEDA 9 shared
- PIPEDA and SOX (Sarbanes-Oxley) Section 404 9 shared
- CIS Critical Security Controls and COPPA 8 shared
- CIS Critical Security Controls and PIPEDA 8 shared
- COPPA and FedRAMP 20x 8 shared
- ESG Essentials and SOC 2 8 shared
- EU AI Act and ISO/IEC 42001 8 shared
- FedRAMP Consolidated Rules and PCI DSS 8 shared
- NIST SP 800-171 and PIPEDA 8 shared
- Apple App Store Kids Category and Google Play Families 7 shared
- ESG Essentials and SOX (Sarbanes-Oxley) Section 404 7 shared
- FedRAMP 20x and PIPEDA 7 shared
- FedRAMP Consolidated Rules and SOC 2 7 shared
- ISO 9001 and SOC 2 7 shared
- Apple App Store Kids Category and COPPA 6 shared
- COPPA and PIPEDA 6 shared
- ESG Essentials and ISO/IEC 27001 6 shared
- ESG Essentials and ISO 9001 6 shared
- ESG Essentials and PIPEDA 6 shared
- EU AI Act and NIST AI Risk Management Framework 6 shared
- FedRAMP Consolidated Rules and SOX (Sarbanes-Oxley) Section 404 6 shared
- ISO 9001 and SOX (Sarbanes-Oxley) Section 404 6 shared
- Amazon Appstore Child-Directed Apps and Google Play Families 5 shared
- COPPA and Google Play Families 5 shared
- ESG Essentials and US Employment Law - Federal Baseline 5 shared
- FedRAMP Consolidated Rules and HIPAA 5 shared
- ISO/IEC 42001 and SOC 2 5 shared
- ISO/IEC 42001 and SOX (Sarbanes-Oxley) Section 404 5 shared
- Amazon Appstore Child-Directed Apps and Apple App Store Kids Category 4 shared
- ESG Essentials and FedRAMP Rev5 Class B 4 shared
- ESG Essentials and FedRAMP Rev5 Class C 4 shared
- ESG Essentials and FedRAMP Rev5 Class D 4 shared
- ESG Essentials and GDPR 4 shared
- ESG Essentials and HIPAA 4 shared
- ESG Essentials and NIST SP 800-53 4 shared
- ESG Essentials and NIST Cybersecurity Framework 4 shared
- FedRAMP 20x and ISO 9001 4 shared
- FedRAMP Consolidated Rules and GDPR 4 shared
- HIPAA and ISO 9001 4 shared
- ISO 9001 and NIST SP 800-53 4 shared
- Amazon Appstore Child-Directed Apps and COPPA 3 shared
- COPPA and FedRAMP Consolidated Rules 3 shared
- ESG Essentials and PCI DSS 3 shared
- FedRAMP 20x and ISO/IEC 42001 3 shared
- FedRAMP Rev5 Class B and ISO 9001 3 shared
- FedRAMP Rev5 Class C and ISO 9001 3 shared
- FedRAMP Rev5 Class D and ISO 9001 3 shared
- FedRAMP Consolidated Rules and PIPEDA 3 shared
- ISO/IEC 42001 and NIST SP 800-53 3 shared
- Apple App Store Kids Category and GDPR 2 shared
- CIS Critical Security Controls and ESG Essentials 2 shared
- COPPA and ESG Essentials 2 shared
- COPPA and ISO 9001 2 shared
- ESG Essentials and FedRAMP 20x 2 shared
- FedRAMP Rev5 Class B and ISO/IEC 42001 2 shared
- FedRAMP Rev5 Class B and US Employment Law - Federal Baseline 2 shared
- FedRAMP Rev5 Class C and ISO/IEC 42001 2 shared
- FedRAMP Rev5 Class C and US Employment Law - Federal Baseline 2 shared
- FedRAMP Rev5 Class D and ISO/IEC 42001 2 shared
- FedRAMP Rev5 Class D and US Employment Law - Federal Baseline 2 shared
- GDPR and US Employment Law - Federal Baseline 2 shared
- HIPAA and ISO/IEC 42001 2 shared
- HIPAA and US Employment Law - Federal Baseline 2 shared
- ISO/IEC 27001 and NIST AI Risk Management Framework 2 shared
- ISO/IEC 27001 and US Employment Law - Federal Baseline 2 shared
- ISO/IEC 42001 and NIST SP 800-171 2 shared
- ISO 9001 and NIST SP 800-171 2 shared
- ISO 9001 and PIPEDA 2 shared
- NIST SP 800-171 and US Employment Law - Federal Baseline 2 shared
- NIST SP 800-53 and US Employment Law - Federal Baseline 2 shared
- NIST AI Risk Management Framework and NIST Cybersecurity Framework 2 shared
- PCI DSS and US Employment Law - Federal Baseline 2 shared
- SOC 2 and US Employment Law - Federal Baseline 2 shared
- AI Governance Essentials and ESG Essentials 1 shared
- AI Governance Essentials and GDPR 1 shared
- AI Governance Essentials and ISO/IEC 27001 1 shared
- AI Governance Essentials and ISO 9001 1 shared
- AI Governance Essentials and NIST Cybersecurity Framework 1 shared
- AI Governance Essentials and PIPEDA 1 shared
- AI Governance Essentials and SOC 2 1 shared
- AI Governance Essentials and SOX (Sarbanes-Oxley) Section 404 1 shared
- CIS Critical Security Controls and ISO 9001 1 shared
- CIS Critical Security Controls and US Employment Law - Federal Baseline 1 shared
- COPPA and ISO/IEC 42001 1 shared
- COPPA and US Employment Law - Federal Baseline 1 shared
- ESG Essentials and ISO/IEC 42001 1 shared
- ESG Essentials and NIST SP 800-171 1 shared
- ESG Essentials and NIST AI Risk Management Framework 1 shared
- FedRAMP 20x and NIST AI Risk Management Framework 1 shared
- FedRAMP 20x and US Employment Law - Federal Baseline 1 shared
- FedRAMP Rev5 Class B and NIST AI Risk Management Framework 1 shared
- FedRAMP Rev5 Class C and NIST AI Risk Management Framework 1 shared
- FedRAMP Rev5 Class D and NIST AI Risk Management Framework 1 shared
- FedRAMP Consolidated Rules and ISO/IEC 42001 1 shared
- FedRAMP Consolidated Rules and ISO 9001 1 shared
- GDPR and Google Play Families 1 shared
- GDPR and ISO 9001 1 shared
- GDPR and NIST AI Risk Management Framework 1 shared
- ISO 9001 and NIST AI Risk Management Framework 1 shared
- ISO 9001 and PCI DSS 1 shared
- NIST SP 800-53 and NIST AI Risk Management Framework 1 shared
- NIST Cybersecurity Framework and US Employment Law - Federal Baseline 1 shared
- PIPEDA and US Employment Law - Federal Baseline 1 shared
- SOX (Sarbanes-Oxley) Section 404 and US Employment Law - Federal Baseline 1 shared
Start free: apply a second framework
No credit card. Watch how much of your next framework your existing controls already cover.