Frameworks
EU AI Act
The AI Act is a European regulation on artificial intelligence (AI) – the first comprehensive regulation on AI by a major regulator anywhere.
.png)
ECC 2
Essential Cybersecurity Controls NCA ECC-2:2024 is a cybersecurity framework released by Saudi Arabia's National Cybersecurity Authority (NCA) to establish minimum security requirements for organizations in the Kingdom.
SOC 2 Type 2
SOC 2 Type 2 is a rigorous framework designed by Certified Public Accountants (AICPA). It is an auditing standard that evaluates the operational effectiveness of an organization’s internal controls.
.png)
AZRamp (Level 3)
The Arizona Risk and Authorization Management Program (AZRAMP) is a security framework used by the State of Arizona to vet and authorize cloud service products. It is modeled after the Federal Risk and Authorization Management Program (FedRAMP) to ensure third-party vendors meet strict NIST-based da...
Saudi Arabia NCA ECC – 2: 2024
Essential Cybersecurity Controls NCA ECC-2:2024 is a cybersecurity framework released by Saudi Arabia's National Cybersecurity Authority (NCA) to establish minimum security requirements for organizations in the Kingdom.
HECVAT 4.02
HECVAT is a standardized questionnaire used by colleges and universities to evaluate the security and privacy of third-party vendors and their solutions.
.jpg)
COPPA
The Children's Online Privacy Protection Act (COPPA) is a U.S. law that gives parents control over personal information collected from children under 13. It requires child-directed websites and online services, or any service knowingly collecting data from children, to post a clear privacy policy, o...
.png)
Custom Frameworks
Custom Frameworks offer organizations the flexibility to define their own set of cybersecurity or compliance controls and guidelines.
SOC 2
SOC 2 (System and Organization Controls 2) is a framework designed by the American Institute of Certified Public Accountants (AICPA) to manage and protect customer data based on five Trust Services Criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy. SOC 2 compliance...