{"frameworks":[{"id":"ISO_27001","name":"ISO/IEC 27001:2022","region":"International"},{"id":"ISO_42001","name":"ISO/IEC 42001:2023","region":"International"},{"id":"ISO_27701","name":"ISO/IEC 27701:2025","region":"International"},{"id":"SOC_2","name":"SOC 2","region":"US"},{"id":"HIPAA","name":"HIPAA","region":"US"},{"id":"GDPR","name":"GDPR","region":"EU"},{"id":"CCPA","name":"CCPA","region":"US"},{"id":"NIST_CSF","name":"NIST Cybersecurity Framework 2.0","region":"US"},{"id":"NIST_800_171","name":"NIST SP 800-171 Rev. 2","region":"US"},{"id":"NIST_800_171_R3","name":"NIST SP 800-171 Rev. 3","region":"US"},{"id":"NIST_800_53","name":"NIST SP 800-53","region":"US"},{"id":"NIS_2","name":"NIS 2","region":"EU"},{"id":"NIS_2_DE","name":"BSIG (Germany NIS 2 transposition)","region":"Germany"},{"id":"DORA","name":"DORA","region":"EU"},{"id":"TISAX","name":"TISAX (VDA ISA 6.0.3)","region":"EU"},{"id":"HDS","name":"HDS v2.0","region":"France"},{"id":"ENS","name":"ENS (Esquema Nacional de Seguridad)","region":"Spain"},{"id":"ISO_9001","name":"ISO 9001:2015","region":"International"},{"id":"ISO_22301","name":"ISO 22301:2019","region":"International"},{"id":"EU_AI_ACT","name":"EU AI Act (Regulation (EU) 2024/1689)","region":"EU"},{"id":"UK_GDPR","name":"UK GDPR","region":"UK"},{"id":"UK_DPA_2018","name":"UK Data Protection Act 2018","region":"UK"},{"id":"UK_DUA_2025","name":"Data (Use and Access) Act 2025","region":"UK"},{"id":"AU_ESSENTIAL_EIGHT","name":"Essential Eight Maturity Model (November 2023)","region":"Australia"},{"id":"NIS_2_BE","name":"Loi NIS 2 du 26 avril 2024 / Wet NIS 2 van 26 april 2024 (Belgium)","region":"Belgium"},{"id":"NIS_2_IT","name":"D.Lgs. 138/2024 (Italy NIS 2 transposition)","region":"Italy"},{"id":"NIS_2_CZ","name":"Zákon č. 264/2025 Sb. (Czechia NIS 2 transposition)","region":"Czechia"},{"id":"NIS_2_SK","name":"Zákon č. 69/2018 Z. z. (Slovakia NIS 2 transposition)","region":"Slovakia"},{"id":"NIS_2_PT","name":"Decreto-Lei n.º 125/2025 (Portugal NIS 2 transposition — RJC)","region":"Portugal"},{"id":"NIS_2_GR","name":"Νόμος 5160/2024 (Greece NIS 2 transposition)","region":"Greece"},{"id":"NIS_2_LT","name":"Kibernetinio saugumo įstatymas Nr. XII-1428 (Lithuania NIS 2 transposition)","region":"Lithuania"},{"id":"NIS_2_LV","name":"Nacionālās kiberdrošības likums (Latvia NIS 2 transposition)","region":"Latvia"},{"id":"NIS_2_EE","name":"Küberturvalisuse seadus (Estonia NIS 2 transposition)","region":"Estonia"},{"id":"NIS_2_HU","name":"2024. évi LXIX. törvény (Hungary NIS 2 transposition)","region":"Hungary"},{"id":"NIS_2_RO","name":"OUG 155/2024 + Legea 124/2025 (Romania NIS 2 transposition)","region":"Romania"},{"id":"NIS_2_BG","name":"Закон за киберсигурност (Bulgaria NIS 2 transposition)","region":"Bulgaria"},{"id":"IE_DPA_2018","name":"Ireland Data Protection Act 2018 (Number 7 of 2018)","region":"Ireland"},{"id":"NIS_2_IE","name":"Ireland NIS 2 transposition (National Cyber Security Bill 2024 — pre-enactment)","region":"Ireland"},{"id":"NIS_2_FI","name":"Kyberturvallisuuslaki 124/2025 (Finland NIS 2 transposition)","region":"Finland"},{"id":"NIS_2_DK","name":"NIS 2-loven (Lov nr. 434 af 6. maj 2025) (Denmark NIS 2 transposition)","region":"Denmark"},{"id":"NIS_2_SE","name":"Cybersäkerhetslag (2025:1506) (Sweden NIS 2 transposition)","region":"Sweden"},{"id":"NIS_2_SI","name":"Zakon o informacijski varnosti (ZInfV-1) (Slovenia NIS 2 transposition)","region":"Slovenia"},{"id":"NIS_2_HR","name":"Zakon o kibernetičkoj sigurnosti (Croatia NIS 2 transposition)","region":"Croatia"},{"id":"NIS_2_MT","name":"S.L. 460.41 (Malta NIS 2 transposition — LN 71/2025 as amended by LN 89/2026)","region":"Malta"},{"id":"NIS_2_CY","name":"Νόμος 60(Ι)/2025 (Cyprus NIS 2 transposition — amending 89(Ι)/2020)","region":"Cyprus"},{"id":"CYFUN","name":"CyFun® — CyberFundamentals Framework (Belgium)","region":"Belgium"},{"id":"NIS_2_AT","name":"NISG 2026 (Austria NIS 2 transposition)","region":"Austria"},{"id":"NIS_2_PL","name":"UKSC (Poland NIS 2 transposition — Dz.U. 2026 poz. 252)","region":"Poland"},{"id":"NIS_2_FR","name":"France NIS 2 transposition (projet de loi résilience-cybersécurité — pré-promulgation)","region":"France"},{"id":"NIST_AI_RMF","name":"NIST AI Risk Management Framework 1.0","region":"US"},{"id":"NIST_800_218","name":"NIST SP 800-218 (SSDF) v1.1","region":"US"},{"id":"NIST_PRIVACY_FRAMEWORK","name":"NIST Privacy Framework v1.0","region":"US"},{"id":"NIST_800_66_R2","name":"NIST SP 800-66 Rev. 2 (HIPAA Security Rule guide)","region":"US"},{"id":"CMMC","name":"CMMC 2.0 (DoD Cybersecurity Maturity Model Certification)","region":"US"},{"id":"NIST_800_207","name":"NIST SP 800-207 Zero Trust Architecture","region":"US"},{"id":"FEDRAMP","name":"FedRAMP (Federal Risk and Authorization Management Program)","region":"US"},{"id":"CA_PIPEDA","name":"Personal Information Protection and Electronic Documents Act","region":"Canada (federal)"},{"id":"CA_QC_LAW_25","name":"Loi 25 (Act respecting the protection of personal information in the private sector, as amended)","region":"Canada — Quebec"},{"id":"FR_SECNUMCLOUD","name":"SecNumCloud v3.2","region":"France"},{"id":"CYBER_ESSENTIALS","name":"Cyber Essentials (UK)","region":"UK"},{"id":"NCSC_CAF","name":"NCSC Cyber Assessment Framework (CAF)","region":"UK"},{"id":"BSI_GRUNDSCHUTZ","name":"BSI IT-Grundschutz (Kompendium Edition 2023)","region":"Germany"},{"id":"BSI_C5","name":"BSI C5:2020 (Cloud Computing Compliance Criteria Catalogue)","region":"Germany"},{"id":"ISO_27002","name":"ISO/IEC 27002:2022","region":"International"},{"id":"ISO_27017","name":"ISO/IEC 27017:2026","region":"International"},{"id":"ISO_27018","name":"ISO/IEC 27018:2025","region":"International"},{"id":"CH_FADP","name":"Switzerland Federal Act on Data Protection (FADP / nDSG / nLPD)","region":"Switzerland"},{"id":"FINMA_23_01","name":"FINMA Circular 2023/1 \"Operational risks and resilience – banks\"","region":"Switzerland"},{"id":"CH_ICT_MIN_STD","name":"Switzerland ICT Minimum Standard (IKT-Mindeststandard / Norme minimale TIC)","region":"Switzerland"},{"id":"IN_DPDPA","name":"India Digital Personal Data Protection Act 2023 (Act No. 22 of 2023) + DPDP Rules 2025","region":"India"},{"id":"IN_CERT_IN","name":"India CERT-In Directions of 28 April 2022 (No. 20(3)/2022-CERT-In) under s. 70B(6) IT Act 2000","region":"India"},{"id":"IN_RBI_IT_CYBER","name":"RBI Cybersecurity, Technology: Risk, Resilience and Assurance Framework Directions, 2026 (entity-wise; replaced RBI/2023-24/107 and the 2016 Cyber Security Framework in Banks)","region":"India"},{"id":"IN_SEBI_CSCRF","name":"SEBI Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities","region":"India"},{"id":"UAVG","name":"Netherlands Uitvoeringswet Algemene verordening gegevensbescherming (UAVG)","region":"Netherlands"},{"id":"BIO_2","name":"Netherlands Baseline Informatiebeveiliging Overheid 2 (BIO2)","region":"Netherlands"},{"id":"NEN_7510","name":"Netherlands NEN 7510 (Medische informatica — Informatiebeveiliging in de zorg)","region":"Netherlands"},{"id":"ISO_19011","name":"ISO 19011:2026","region":"International"},{"id":"CIS_CONTROLS_V8","name":"CIS Controls v8.1 (Critical Security Controls)","region":"International"},{"id":"UK_NIS_2018","name":"Network and Information Systems (NIS) Regulations 2018","region":"UK"},{"id":"CH_NCS","name":"Switzerland National Cyberstrategy (NCS / Nationale Cyberstrategie / Cyberstratégie nationale)","region":"Switzerland"},{"id":"DIGID_ASSESSMENT","name":"Netherlands ICT-beveiligingsassessments DigiD (Normenkader 3.0)","region":"Netherlands"},{"id":"BE_DPA_2018","name":"Belgian Data Protection Act 30 July 2018 (LPVP / WBP)","region":"Belgium"},{"id":"AU_PRIVACY_ACT","name":"Privacy Act 1988 (Cth) + Australian Privacy Principles","region":"Australia"},{"id":"ISO_27000","name":"ISO/IEC 27000:2026","region":"International"},{"id":"BDSG","name":"BDSG — Bundesdatenschutzgesetz","region":"Germany"},{"id":"IN_IRDAI_CS","name":"IRDAI Information and Cybersecurity Guidelines 2026","region":"India"},{"id":"PCI_DSS","name":"PCI DSS v4.0.1","region":"International"},{"id":"UK_FOIA_2000","name":"UK Freedom of Information Act 2000 (c. 36)","region":"UK"},{"id":"UK_EIR_2004","name":"UK Environmental Information Regulations 2004 (SI 2004/3391)","region":"UK"},{"id":"AIUC_1","name":"AIUC-1","region":"International"},{"id":"EN_18286","name":"EN 18286:2026","region":"EU"},{"id":"COBIT_2019","name":"COBIT 2019","region":"International"},{"id":"CA_AB_PIPA","name":"Personal Information Protection Act (Alberta)","region":"Canada — Alberta"},{"id":"SG_MAS_TRM","name":"MAS Technology Risk Management Guidelines","region":"Singapore"},{"id":"SG_PDPA","name":"Singapore Personal Data Protection Act 2012 (Act 26 of 2012)","region":"Singapore"},{"id":"CA_BC_PIPA","name":"Personal Information Protection Act (British Columbia)","region":"Canada — British Columbia"},{"id":"CA_OSFI_B13","name":"OSFI Guideline B-13 — Technology and Cyber Risk Management","region":"Canada (federal)"},{"id":"JP_APPI","name":"Japan Act on the Protection of Personal Information (APPI) (Act No. 57 of 2003)","region":"Japan"},{"id":"JP_MY_NUMBER_ACT","name":"Japan My Number Act (Act No. 27 of 2013)","region":"Japan"},{"id":"JP_METI_CYBERSECURITY_MGMT","name":"Japan METI/IPA Cybersecurity Management Guidelines Ver. 3.0","region":"Japan"},{"id":"JP_JIS_Q_27001","name":"Japan JIS Q 27001:2025 (Japanese adoption of ISO/IEC 27001:2022)","region":"Japan"},{"id":"AU_ISM","name":"Australian Government Information Security Manual (ASD ISM)","region":"Australia"},{"id":"AU_CPS_234","name":"APRA Prudential Standard CPS 234 — Information Security","region":"Australia"},{"id":"NZ_PRIVACY_ACT_2020","name":"Privacy Act 2020 (NZ) + Information Privacy Principles","region":"New Zealand"},{"id":"NZ_NZISM","name":"New Zealand Information Security Manual (NZISM)","region":"New Zealand"},{"id":"ISO_SAE_21434","name":"ISO/SAE 21434:2021","region":"International"},{"id":"UN_R155","name":"UN Regulation No. 155 (Vehicle Cyber Security / CSMS)","region":"International"},{"id":"HITRUST","name":"HITRUST CSF v11.8.0","region":"US"},{"id":"KR_ISMS_P","name":"K-ISMS / ISMS-P (South Korea)","region":"South Korea"},{"id":"SG_MTCS","name":"MTCS (SS 584:2020)","region":"Singapore"},{"id":"AU_NSW_CSP","name":"NSW Cyber Security Policy (Cyber Security NSW)","region":"Australia"},{"id":"AU_VIC_VPDSS","name":"Victorian Protective Data Security Standards (VPDSS) v2.0","region":"Australia"},{"id":"AU_WA_CSP","name":"WA Cyber Security Policy (2024)","region":"Australia"},{"id":"CRA","name":"CRA (EU Cyber Resilience Act)","region":"EU"},{"id":"EASA_PART_IS","name":"EASA Part-IS (Regulations (EU) 2023/203 and 2022/1645)","region":"EU"},{"id":"UK_CAA_CYBER_OVERSIGHT","name":"UK CAA Cyber Security Oversight (CAP 1753 / CAF for Aviation CAP 1850)","region":"UK"},{"id":"DO_326A_ED_202A","name":"Airworthiness Security: RTCA DO-326A/B and EUROCAE ED-202A/B set (with EASA AMC 20-42)","region":"International"},{"id":"NIST_IR_8401","name":"NIST IR 8401 Satellite Ground Segment CSF Profile (with IR 8270 / IR 8441 / SPD-5)","region":"US"},{"id":"NASA_STD_1006","name":"NASA-STD-1006A Space System Protection Standard","region":"US"},{"id":"CCSDS_SECURITY","name":"CCSDS Space Data Systems Security Standards (350-357 series)","region":"International"},{"id":"ECSS_E_ST_80C","name":"ECSS-E-ST-80C Space engineering: Security in space systems lifecycles","region":"Europe"},{"id":"IEC_62443","name":"IEC 62443 industrial automation and control systems security (parts 2-1, 3-2, 3-3, 4-1)","region":"International"},{"id":"NIST_800_82","name":"NIST SP 800-82 Rev. 3 Guide to Operational Technology (OT) Security","region":"US"},{"id":"ISO_27019","name":"ISO/IEC 27019:2024 Information security controls for the energy utility industry","region":"International"},{"id":"IT_GARANTE_COOKIE","name":"Linee guida cookie e altri strumenti di tracciamento (Garante Privacy)","region":"Italy"},{"id":"NEN_7512","name":"Netherlands NEN 7512 (Medische informatica - Informatiebeveiliging in de zorg - Vertrouwensbasis voor gegevensuitwisseling)","region":"Netherlands"},{"id":"FINMA_18_03","name":"FINMA Circular 2018/3 \"Outsourcing\" (banks, insurance companies and selected financial institutions under FinIA)","region":"Switzerland"},{"id":"DORA_RTS_2024_1774","name":"DORA RTS on ICT Risk Management","region":"EU"},{"id":"NIS2_IR_2024_2690","name":"NIS 2 Implementing Regulation (EU) 2024/2690","region":"EU"},{"id":"NIS_2_NL","name":"Cyberbeveiligingswet (Netherlands NIS 2 transposition)","region":"Netherlands"},{"id":"NIS_2_ES","name":"Spain NIS 2 status (Ley de Coordinación y Gobernanza de la Ciberseguridad pending; RD-ley 12/2018 in force)","region":"Spain"},{"id":"NIS_2_LU","name":"Loi du 5 mai 2026 (Luxembourg NIS 2 transposition)","region":"Luxembourg"}]}