Framework readiness
Each framework is broken into its clauses. For each clause we show whether the controls mapped to it are passing their tests, whether the evidence is current and whether the related policies are approved. Frameworks we haven't adopted are shown too, as a gap analysis.
Frameworks we've adopted
None yet.
Security frameworks
SOC 2 Trust Services Criteria (Security, Availability, Confidentiality, Processing Integrity)
38 of 43 clauses mapped to adopted controls
As of (just now)
ISO/IEC 27001:2022
82 of 118 clauses mapped to adopted controls · 1 known gap
As of (just now)
ISO/IEC 27001:2013 Annex A (legacy)
80 of 114 clauses mapped to adopted controls
As of (just now)
NIST Cybersecurity Framework 2.0
92 of 106 clauses mapped to adopted controls
As of (just now)
Privacy frameworks
SOC 2 Privacy Criteria
8 of 18 clauses mapped to adopted controls
As of (just now)
ISO/IEC 27701 (PII controller)
24 of 55 clauses mapped to adopted controls
As of (just now)
ISO/IEC 27701 (PII processor)
20 of 42 clauses mapped to adopted controls
As of (just now)
EU General Data Protection Regulation (GDPR)
11 of 45 clauses mapped to adopted controls
As of (just now)
California Consumer Privacy Act as amended by CPRA
8 of 24 clauses mapped to adopted controls
As of (just now)
Government frameworks
NIST SP 800-171 Rev. 3
66 of 97 clauses mapped to adopted controls · 1 known gap
As of (just now)
CMMC 2.0 Level 1 (Foundational)
10 of 15 clauses mapped to adopted controls
As of (just now)
CMMC 2.0 Level 2 (Advanced)
70 of 110 clauses mapped to adopted controls · 1 known gap
As of (just now)
FedRAMP Moderate readiness (NIST SP 800-53 Rev. 5 base controls)
124 of 181 clauses mapped to adopted controls · 3 known gaps
As of (just now)
Industry frameworks
HIPAA Security Rule
40 of 50 clauses mapped to adopted controls
As of (just now)
HITRUST CSF readiness (assessment domains)
16 of 19 clauses mapped to adopted controls
As of (just now)
PCI DSS v4.0.1
132 of 205 clauses mapped to adopted controls
As of (just now)
SOX IT General Controls (ITGC)
18 of 24 clauses mapped to adopted controls · 1 known gap
As of (just now)