Attestkeep
Language: English
Sign up
Frameworks

13 frameworks. 293 clauses, each one cited.

Each framework is a table of the clauses one cluster's records can speak to, in the instrument's own numbering. The clauses a cluster cannot answer are marked outside scope with the reason, not stretched to fit.

Show frameworks by category
SecurityUnited States (AICPA)SOC 2 (Trust Services Criteria)AICPA TSP section 100 (2017, revised 2022)13 clauses · 11 assessed · 2 outside scopeRegulatoryEuropean UnionEU Cyber Resilience Act and NIS2Regulation (EU) 2024/2847 · Directive (EU) 2022/255534 clauses · 26 assessed · 8 outside scopeRegulatoryEuropean UnionDORA (Digital Operational Resilience Act)Regulation (EU) 2022/255422 clauses · 15 assessed · 7 outside scopeSecurityUnited States (NIST)NIST SP 800-190 (Application Container Security)NIST SP 800-19015 clauses · 11 assessed · 4 outside scopeSecurityUnited States (NIST)NIST SP 800-218 (SSDF v1.1)NIST SP 800-218 v1.113 clauses · 11 assessed · 2 outside scopeSecurityUnited States (NIST)NIST SP 800-53 Rev. 5 (selected controls)NIST SP 800-53 Rev. 515 clauses · 15 assessed · 0 outside scopeSecurityInternational (ISO/IEC)ISO/IEC 27001:2022 (Annex A)ISO/IEC 27001:202212 clauses · 10 assessed · 2 outside scopeRegulatoryEuropean UnionGDPR Article 32Regulation (EU) 2016/6796 clauses · 4 assessed · 2 outside scopeSecurityInternational (PCI SSC)PCI DSS v4.0.1 (Requirements 6 and 11)PCI Security Standards Council, Payment Card Industry Data Security Standard, version 4.0.1 (June 2024)13 clauses · 8 assessed · 5 outside scopeRegionalSingaporeMAS Technology Risk Management Guidelines (2021)Monetary Authority of Singapore, 18 January 202130 clauses · 19 assessed · 11 outside scopeRegionalAustraliaASD Essential Eight Maturity Model (November 2023)Australian Signals Directorate, last updated November 202346 clauses · 38 assessed · 8 outside scopeRegionalJapanControl Criteria of ISMAP (August 2024)ISMAP Steering Committee; Japanese edition last revised 1 August 2024; English reference translation last revised 22 September 2023, attached tables matching the 2024 edition42 clauses · 24 assessed · 18 outside scopeRegionalSouth KoreaISMS-P Certification Criteria (November 2023)정보보호 및 개인정보보호 관리체계 인증기준 (Annex 7 of the joint notification of the Personal Information Protection Commission and the Ministry of Science and ICT), as explained in KISA's 인증기준 안내서 of November 202332 clauses · 21 assessed · 11 outside scope
How it works

One set of records, read against any of them.

  • Shipped with the operatorThe mapping is not fetched, so an air-gapped cluster reports what a connected one does.
  • Same question, same answerWhere two frameworks ask the same thing, the same statement about the period answers both, so two reports cannot disagree.
  • Translations say soISMAP and ISMS-P are quoted from translations, and each citation names its source text.
  • On every planCommunity and Team include one framework of your choice, Business three, Enterprise all of them. Pricing

Install it yourself.

Create an account, confirm your e-mail with the code we send, take the free Community key from the Licences page, and install with Helm.

Create an account