Frameworks

Every framework, one owner

SOC 2, ISO 27001, HIPAA, PCI DSS, and CPCSC, run by one fractional CISO who maps your controls once and reuses the evidence across frameworks.

SOC 2

AICPA Trust Services Criteria. The default for B2B SaaS.

International standard for information security management.

Required for organizations handling protected health information.

For anyone storing or processing payment cards.

Canada’s cyber certification for defence suppliers.

EU data protection law, alongside your SOC 2 or ISO 27001 program.