Frameworks
Every framework Cyberwiz ships
11 frameworks and regulations, each mapped to the same set of common controls. The seven below are the ones buyers ask for by name, and each has a page on what it asks for and what an assessor will want to see.
- SOC 2
Trust services criteria, reported on over a window rather than a moment.
Framework · Global
- ISO 27001
The information security management standard. Certifiable, and the one buyers ask for by name.
Standard · Global
- PCI DSS
Card data security. Mandatory for anyone who stores, processes or transmits it.
Standard · Global
- NIST 800-53
Comprehensive control catalog. Required if you work with US government agencies.
Standard · United States
- HIPAA
Protects patient health information in the US. Required for healthcare organizations and vendors.
Regulation · United States
- GDPR
Protects EU residents' personal data. Applies if you have any EU customers or employees.
Regulation · European Union / Global reach
- NIS2
EU cybersecurity law for critical infrastructure. Non-compliance can result in significant fines.
Regulation · European Union
Also in the catalog
NIS2 Implementing Regulation2024
Detailed technical requirements for NIS2. Tells you exactly what controls to implement.
CIS Controls8.1
Prioritized list of security actions. Start with the basics and build up over time.
ISO 277992025
Tailors ISO 27001 for healthcare. Helps protect sensitive patient information.
Israeli Privacy Protection Regulations5777-2017
Israel's data protection rules. Required for organizations handling Israeli personal data.
Need something that is not here? Custom frameworks carry their own sections and controls, and behave like any other framework once defined. See Compliance.
Provable today, not at audit time.
Run it yourself or have Bindsec run it for you. Either way, the evidence is current and the posture is one place.