{"frameworks":[{"id":"ISO_27001","name":"ISO/IEC 27001:2022","region":"International"},{"id":"ISO_42001","name":"ISO/IEC 42001:2023","region":"International"},{"id":"ISO_27701","name":"ISO/IEC 27701:2025","region":"International"},{"id":"SOC_2","name":"SOC 2","region":"US"},{"id":"HIPAA","name":"HIPAA","region":"US"},{"id":"GDPR","name":"GDPR","region":"EU"},{"id":"CCPA","name":"CCPA","region":"US"},{"id":"NIST_CSF","name":"NIST Cybersecurity Framework 2.0","region":"US"},{"id":"NIST_800_171","name":"NIST SP 800-171 Rev. 2","region":"US"},{"id":"NIST_800_171_R3","name":"NIST SP 800-171 Rev. 3","region":"US"},{"id":"NIST_800_53","name":"NIST SP 800-53","region":"US"},{"id":"NIS_2","name":"NIS 2","region":"EU"},{"id":"NIS_2_DE","name":"BSIG (Germany NIS 2 transposition)","region":"Germany"},{"id":"DORA","name":"DORA","region":"EU"},{"id":"TISAX","name":"TISAX (VDA ISA 6.0.3)","region":"EU"},{"id":"HDS","name":"HDS v2.0","region":"France"},{"id":"ENS","name":"ENS (Esquema Nacional de Seguridad)","region":"Spain"},{"id":"ISO_9001","name":"ISO 9001:2015","region":"International"},{"id":"ISO_22301","name":"ISO 22301:2019","region":"International"},{"id":"EU_AI_ACT","name":"EU AI Act (Regulation (EU) 2024/1689)","region":"EU"},{"id":"UK_GDPR","name":"UK GDPR","region":"UK"},{"id":"UK_DPA_2018","name":"UK Data Protection Act 2018","region":"UK"},{"id":"UK_DUA_2025","name":"Data (Use and Access) Act 2025","region":"UK"},{"id":"AU_ESSENTIAL_EIGHT","name":"Essential Eight Maturity Model (November 2023)","region":"Australia"},{"id":"NIS_2_BE","name":"Loi NIS 2 du 26 avril 2024 / Wet NIS 2 van 26 april 2024 (Belgium)","region":"Belgium"},{"id":"NIS_2_IT","name":"D.Lgs. 138/2024 (Italy NIS 2 transposition)","region":"Italy"},{"id":"NIS_2_CZ","name":"Zákon č. 264/2025 Sb. (Czechia NIS 2 transposition)","region":"Czechia"},{"id":"NIS_2_SK","name":"Zákon č. 69/2018 Z. z. (Slovakia NIS 2 transposition)","region":"Slovakia"},{"id":"NIS_2_PT","name":"Decreto-Lei n.º 125/2025 (Portugal NIS 2 transposition — RJC)","region":"Portugal"},{"id":"NIS_2_GR","name":"Νόμος 5160/2024 (Greece NIS 2 transposition)","region":"Greece"},{"id":"NIS_2_LT","name":"Kibernetinio saugumo įstatymas Nr. XII-1428 (Lithuania NIS 2 transposition)","region":"Lithuania"},{"id":"NIS_2_LV","name":"Nacionālās kiberdrošības likums (Latvia NIS 2 transposition)","region":"Latvia"},{"id":"NIS_2_EE","name":"Küberturvalisuse seadus (Estonia NIS 2 transposition)","region":"Estonia"},{"id":"NIS_2_HU","name":"2024. évi LXIX. törvény (Hungary NIS 2 transposition)","region":"Hungary"},{"id":"NIS_2_RO","name":"OUG 155/2024 + Legea 124/2025 (Romania NIS 2 transposition)","region":"Romania"},{"id":"NIS_2_BG","name":"Закон за киберсигурност (Bulgaria NIS 2 transposition)","region":"Bulgaria"},{"id":"IE_DPA_2018","name":"Ireland Data Protection Act 2018 (Number 7 of 2018)","region":"Ireland"},{"id":"NIS_2_IE","name":"Ireland NIS 2 transposition (National Cyber Security Bill 2024 — pre-enactment)","region":"Ireland"},{"id":"NIS_2_FI","name":"Kyberturvallisuuslaki 124/2025 (Finland NIS 2 transposition)","region":"Finland"},{"id":"NIS_2_DK","name":"NIS 2-loven (Lov nr. 434 af 6. maj 2025) (Denmark NIS 2 transposition)","region":"Denmark"},{"id":"NIS_2_SE","name":"Cybersäkerhetslag (2025:1506) (Sweden NIS 2 transposition)","region":"Sweden"},{"id":"NIS_2_SI","name":"Zakon o informacijski varnosti (ZInfV-1) (Slovenia NIS 2 transposition)","region":"Slovenia"},{"id":"NIS_2_HR","name":"Zakon o kibernetičkoj sigurnosti (Croatia NIS 2 transposition)","region":"Croatia"},{"id":"NIS_2_MT","name":"S.L. 460.41 (Malta NIS 2 transposition — LN 71/2025 as amended by LN 89/2026)","region":"Malta"},{"id":"NIS_2_CY","name":"Νόμος 60(Ι)/2025 (Cyprus NIS 2 transposition — amending 89(Ι)/2020)","region":"Cyprus"},{"id":"CYFUN","name":"CyFun® — CyberFundamentals Framework (Belgium)","region":"Belgium"},{"id":"NIS_2_AT","name":"NISG 2026 (Austria NIS 2 transposition)","region":"Austria"},{"id":"NIS_2_PL","name":"UKSC (Poland NIS 2 transposition — Dz.U. 2026 poz. 252)","region":"Poland"},{"id":"NIS_2_FR","name":"France NIS 2 transposition (projet de loi résilience-cybersécurité — pré-promulgation)","region":"France"},{"id":"NIST_AI_RMF","name":"NIST AI Risk Management Framework 1.0","region":"US"},{"id":"NIST_800_218","name":"NIST SP 800-218 (SSDF) v1.1","region":"US"},{"id":"NIST_PRIVACY_FRAMEWORK","name":"NIST Privacy Framework v1.0","region":"US"},{"id":"NIST_800_66_R2","name":"NIST SP 800-66 Rev. 2 (HIPAA Security Rule guide)","region":"US"},{"id":"CMMC","name":"CMMC 2.0 (DoD Cybersecurity Maturity Model Certification)","region":"US"},{"id":"NIST_800_207","name":"NIST SP 800-207 Zero Trust Architecture","region":"US"},{"id":"FEDRAMP","name":"FedRAMP (Federal Risk and Authorization Management Program)","region":"US"},{"id":"CA_PIPEDA","name":"Personal Information Protection and Electronic Documents Act","region":"Canada (federal)"},{"id":"CA_QC_LAW_25","name":"Loi 25 (Act respecting the protection of personal information in the private sector, as amended)","region":"Canada — Quebec"},{"id":"FR_SECNUMCLOUD","name":"SecNumCloud v3.2","region":"France"},{"id":"CYBER_ESSENTIALS","name":"Cyber Essentials (UK)","region":"UK"},{"id":"NCSC_CAF","name":"NCSC Cyber Assessment Framework (CAF)","region":"UK"},{"id":"BSI_GRUNDSCHUTZ","name":"BSI IT-Grundschutz (Kompendium Edition 2023)","region":"Germany"},{"id":"BSI_C5","name":"BSI C5 (Cloud Computing Compliance Criteria Catalogue)","region":"Germany"},{"id":"ISO_27002","name":"ISO/IEC 27002:2022","region":"International"},{"id":"ISO_27017","name":"ISO/IEC 27017:2026","region":"International"},{"id":"ISO_27018","name":"ISO/IEC 27018:2025","region":"International"},{"id":"CH_FADP","name":"Switzerland Federal Act on Data Protection (FADP / nDSG / nLPD)","region":"Switzerland"},{"id":"FINMA_23_01","name":"FINMA Circular 2023/1 \"Operational risks and resilience – banks\"","region":"Switzerland"},{"id":"CH_ICT_MIN_STD","name":"Switzerland ICT Minimum Standard (IKT-Mindeststandard / Norme minimale TIC)","region":"Switzerland"},{"id":"IN_DPDPA","name":"India Digital Personal Data Protection Act 2023 (Act No. 22 of 2023) + DPDP Rules 2025","region":"India"},{"id":"IN_CERT_IN","name":"India CERT-In Directions of 28 April 2022 (No. 20(3)/2022-CERT-In) under s. 70B(6) IT Act 2000","region":"India"},{"id":"IN_RBI_IT_CYBER","name":"RBI Master Direction on IT Governance, Risk, Controls and Assurance Practices (RBI/2023-24/107) + RBI Cyber Security Framework","region":"India"},{"id":"IN_SEBI_CSCRF","name":"SEBI Cybersecurity and Cyber Resilience Framework (CSCRF) for SEBI Regulated Entities","region":"India"},{"id":"UAVG","name":"Netherlands Uitvoeringswet Algemene verordening gegevensbescherming (UAVG)","region":"Netherlands"},{"id":"BIO_2","name":"Netherlands Baseline Informatiebeveiliging Overheid 2 (BIO2)","region":"Netherlands"},{"id":"NEN_7510","name":"Netherlands NEN 7510 (Medische informatica — Informatiebeveiliging in de zorg)","region":"Netherlands"},{"id":"ISO_19011","name":"ISO 19011:2026","region":"International"},{"id":"CIS_CONTROLS_V8","name":"CIS Controls v8.1 (Critical Security Controls)","region":"International"},{"id":"UK_NIS_2018","name":"Network and Information Systems (NIS) Regulations 2018","region":"UK"},{"id":"CH_NCS","name":"Switzerland National Cyberstrategy (NCS / Nationale Cyberstrategie / Cyberstratégie nationale)","region":"Switzerland"},{"id":"DIGID_ASSESSMENT","name":"Netherlands ICT-beveiligingsassessments DigiD (Normenkader 3.0)","region":"Netherlands"},{"id":"BE_DPA_2018","name":"Belgian Data Protection Act 30 July 2018 (LPVP / WBP)","region":"Belgium"},{"id":"AU_PRIVACY_ACT","name":"Privacy Act 1988 (Cth) + Australian Privacy Principles","region":"Australia"},{"id":"ISO_27000","name":"ISO/IEC 27000:2026","region":"International"},{"id":"BDSG","name":"BDSG — Bundesdatenschutzgesetz","region":"Germany"},{"id":"IN_IRDAI_CS","name":"IRDAI Information and Cybersecurity Guidelines 2026","region":"India"},{"id":"PCI_DSS","name":"PCI DSS v4.0.1","region":"International"},{"id":"UK_FOIA_2000","name":"UK Freedom of Information Act 2000 (c. 36)","region":"UK"},{"id":"UK_EIR_2004","name":"UK Environmental Information Regulations 2004 (SI 2004/3391)","region":"UK"},{"id":"AIUC_1","name":"AIUC-1","region":"International"},{"id":"EN_18286","name":"EN 18286:2026","region":"EU"},{"id":"COBIT_2019","name":"COBIT 2019","region":"International"},{"id":"CA_AB_PIPA","name":"Personal Information Protection Act (Alberta)","region":"Canada — Alberta"},{"id":"SG_MAS_TRM","name":"MAS Technology Risk Management Guidelines","region":"Singapore"},{"id":"SG_PDPA","name":"Singapore Personal Data Protection Act 2012 (Act 26 of 2012)","region":"Singapore"},{"id":"CA_BC_PIPA","name":"Personal Information Protection Act (British Columbia)","region":"Canada — British Columbia"},{"id":"CA_OSFI_B13","name":"OSFI Guideline B-13 — Technology and Cyber Risk Management","region":"Canada (federal)"}]}