Compliance Frameworks
One mapping. Multiple frameworks. Less duplication.
We design control environments that satisfy multiple frameworks at once — so the work you do for ISO 27001 also evidences SOC 2, DPDP and beyond.
ISO 27001:2022
Information Security Management System certification with Annex A controls.
ISO 27701
Privacy Information Management System extension to ISO 27001.
SOC 2
AICPA Trust Services Criteria — Security, Availability, Confidentiality, Processing Integrity, Privacy.
PCI-DSS v4.0
Payment Card Industry Data Security Standard for cardholder data environments.
HIPAA
US Health Insurance Portability and Accountability Act safeguards for PHI.
DPDP Act 2023
India's Digital Personal Data Protection Act for data fiduciaries.
GDPR
EU General Data Protection Regulation for data controllers and processors.
NIST CSF 2.0
Cybersecurity Framework — Govern, Identify, Protect, Detect, Respond, Recover.
RBI Guidelines
Reserve Bank of India cyber security frameworks for banks, NBFCs, PAs and PPIs.
Ready to build a defensible security program?
Book a confidential 30-minute consultation with our advisory team.