All Frameworks
The complete list of all 373 compliance frameworks Safeguard supports.
All Supported Frameworks
Safeguard supports 373 compliance frameworks across 219 countries and territories — every country in the world with a published security, privacy, or supply-chain regime. Every framework is scored after each assessment with per-control drill-down.
Americas (107)
| Framework | Jurisdiction | Type |
|---|---|---|
| NIST SSDF | United States | Government Regulation |
| NIST CSF 2.0 | United States | Government Regulation |
| NIST SP 800-53 | United States | Government Regulation |
| NIST SP 800-161 | United States | Government Regulation |
| NIST SP 800-171 | United States | Government Regulation |
| NIST SP 800-82 | United States | Government Regulation |
| NIST SP 800-207 | United States | Government Regulation |
| NIST CSF 2.0 (Full) | United States | Government Regulation |
| FISMA | United States | Government Regulation |
| FedRAMP | United States | Government Regulation |
| StateRAMP | United States | Government Regulation |
| CMMC 2.0 | United States | Government Regulation |
| DFARS 252.204-7012 | United States | Government Regulation |
| NDAA Section 889 | United States | Government Regulation |
| HIPAA Security Rule | United States | Government Regulation |
| HIPAA / HITECH | United States | Government Regulation |
| HITRUST CSF | United States | Government Regulation |
| FDA Medical Device | United States | Government Regulation |
| SOC 2 Type II | United States | Government Regulation |
| SOC 2 Type II (Extended) | United States | Government Regulation |
| SOX ITGC | United States | Government Regulation |
| FTC Safeguards Rule | United States | Government Regulation |
| FFIEC CAT | United States | Government Regulation |
| CCPA / CPRA | United States | Government Regulation |
| FIPS 140-3 | United States | Government Regulation |
| NIST AI RMF | United States | Government Regulation |
| NIST SP 800-218A | United States | Government Regulation |
| NERC CIP | United States | Government Regulation |
| Canada PIPEDA | Canada | Government Regulation |
| Brazil LGPD | Brazil | Government Regulation |
| Virginia CDPA | United States | Government Regulation |
| Colorado CPA | United States | Government Regulation |
| Connecticut CTDPA | United States | Government Regulation |
| Utah UCPA | United States | Government Regulation |
| Texas TDPSA | United States | Government Regulation |
| Oregon OCPA | United States | Government Regulation |
| Montana CDPA | United States | Government Regulation |
| Tennessee TIPA | United States | Government Regulation |
| Delaware PDPA | United States | Government Regulation |
| New Jersey CDPA | United States | Government Regulation |
| New Hampshire DPA | United States | Government Regulation |
| Maryland MODPA | United States | Government Regulation |
| Minnesota CDPA | United States | Government Regulation |
| Indiana CDPA | United States | Government Regulation |
| Iowa CDPA | United States | Government Regulation |
| Florida Digital Bill of Rights | United States | Government Regulation |
| Washington My Health My Data Act | United States | Government Regulation |
| FDA 21 CFR Part 11 | United States | Government Regulation |
| TSA Pipeline Security Directives | United States | Government Regulation |
| Mexico LFPDPPP | Mexico | Government Regulation |
| Argentina PDPL (Law 25.326) | Argentina | Government Regulation |
| Chile Law 19.628 | Chile | Government Regulation |
| Colombia Law 1581 | Colombia | Government Regulation |
| Peru Law 29733 | Peru | Government Regulation |
| NIST Privacy Framework | United States | Industry Standard |
| NY DFS 23 NYCRR 500 | United States | Government Regulation |
| NY SHIELD Act | United States | Government Regulation |
| Massachusetts 201 CMR 17.00 | United States | Government Regulation |
| Illinois BIPA | United States | Government Regulation |
| COPPA | United States | Government Regulation |
| FERPA | United States | Government Regulation |
| GLBA | United States | Government Regulation |
| FCRA / FACTA | United States | Government Regulation |
| NIST SP 800-37 RMF | United States | Government Regulation |
| NIST SP 800-66 r2 | United States | Government Regulation |
| NIST SP 800-63 | United States | Government Regulation |
| Quebec Law 25 | Canada | Government Regulation |
| Canada CPPA | Canada | Government Regulation |
| Uruguay Law 18.331 | Uruguay | Government Regulation |
| Jamaica DPA | Jamaica | Government Regulation |
| Costa Rica Law No. 8968 on Personal Data | Costa Rica | Government Regulation |
| Panama Law No. 81 of 2019 on Personal Data | Panama | Government Regulation |
| Ecuador Organic Law on Personal Data Protection | Ecuador | Government Regulation |
| Paraguay Law No. 6534/2020 on Personal Data | Paraguay | Government Regulation |
| Nicaragua Law No. 787 on Personal Data | Nicaragua | Government Regulation |
| Dominican Republic Law No. 172-13 on Personal Data | Dominican Republic | Government Regulation |
| Trinidad and Tobago Data Protection Act 2011 | Trinidad and Tobago | Government Regulation |
| Barbados Data Protection Act 2019 | Barbados | Government Regulation |
| Bahamas Data Protection Act 2003 | Bahamas | Government Regulation |
| El Salvador Personal Data Protection Law 2024 | El Salvador | Government Regulation |
| Bermuda Personal Information Protection Act 2016 | Bermuda | Government Regulation |
| Cayman Islands Data Protection Act 2017 | Cayman Islands | Government Regulation |
| Antigua and Barbuda Data Protection Act 2013 | Antigua and Barbuda | Government Regulation |
| El Salvador Cybersecurity and Information Security Law 2024 | El Salvador | Government Regulation |
| Bolivia Supreme Decree 1793 | Bolivia | Government Regulation |
| Venezuela Constitutional Habeas Data | Venezuela | Government Regulation |
| Guatemala Ley de Acceso a la Informacion Publica | Guatemala | Government Regulation |
| Honduras Ley de Transparencia (Habeas Data) | Honduras | Government Regulation |
| Cuba Law 149/2022 on Personal Data Protection | Cuba | Government Regulation |
| Haiti National Privacy Framework | Haiti | Government Regulation |
| Belize Data Protection Act 2021 | Belize | Government Regulation |
| Guyana Data Protection Act 2023 | Guyana | Government Regulation |
| Suriname National Privacy Framework | Suriname | Government Regulation |
| Grenada National ICT / Privacy Framework | Grenada | Government Regulation |
| Dominica National ICT / Privacy Framework | Dominica | Government Regulation |
| Saint Lucia Data Protection Act | Saint Lucia | Government Regulation |
| Saint Kitts and Nevis Data Protection Act 2018 | Saint Kitts and Nevis | Government Regulation |
| Saint Vincent National ICT / Privacy Framework | Saint Vincent and the Grenadines | Government Regulation |
| Greenland Data Protection Act | Greenland | Government Regulation |
| Puerto Rico Act 111-2005 / US Frameworks | Puerto Rico | Government Regulation |
| Aruba Personal Data Protection Ordinance | Aruba | Government Regulation |
| Curacao Personal Data Protection Ordinance | Curacao | Government Regulation |
| British Virgin Islands Data Protection Act 2021 | British Virgin Islands | Government Regulation |
| Turks and Caicos Data Protection Ordinance | Turks and Caicos | Government Regulation |
| Anguilla Data Protection Act 2020 | Anguilla | Government Regulation |
| Montserrat National ICT / Privacy Framework | Montserrat | Government Regulation |
| Falkland Islands Data Protection Ordinance | Falkland Islands | Government Regulation |
Europe (76)
| Framework | Jurisdiction | Type |
|---|---|---|
| EU Cyber Resilience Act | European Union | Government Regulation |
| EU DORA | European Union | Government Regulation |
| EU NIS2 Directive | European Union | Government Regulation |
| GDPR | European Union | Government Regulation |
| GDPR Article 25 | European Union | Government Regulation |
| EU AI Act | European Union | Government Regulation |
| ETSI EN 303 645 | European Union | Government Regulation |
| ENISA Good Practices | European Union | Government Regulation |
| BSI TR-03183-2 | Germany | Government Regulation |
| TISAX | Germany | Government Regulation |
| UK Cyber Essentials | United Kingdom | Government Regulation |
| France ANSSI RGS | France | Government Regulation |
| Italy ACN Cybersecurity | Italy | Government Regulation |
| Spain ENS (RD 311/2022) | Spain | Government Regulation |
| Netherlands NEN 7510 | Netherlands | Government Regulation |
| Switzerland revFADP | Switzerland | Government Regulation |
| Norway NSM Basic Principles | Norway | Government Regulation |
| UK GDPR / DPA 2018 | United Kingdom | Government Regulation |
| UK NCSC CAF | United Kingdom | Government Regulation |
| EU Cybersecurity Act | European Union | Government Regulation |
| EU eIDAS Regulation | European Union | Government Regulation |
| EU PSD2 | European Union | Government Regulation |
| EU Digital Services Act | European Union | Government Regulation |
| EU Digital Markets Act | European Union | Government Regulation |
| EU Data Act | European Union | Government Regulation |
| BSI IT-Grundschutz | Germany | Government Regulation |
| Estonia EISA / ISKE | Estonia | Government Regulation |
| Poland KSC Act | Poland | Government Regulation |
| Ireland Data Protection Act 2018 | Ireland | Government Regulation |
| Belgium Data Protection Act 2018 | Belgium | Government Regulation |
| Austria Data Protection Act (DSG) | Austria | Government Regulation |
| Sweden Data Protection Act (2018:218) | Sweden | Government Regulation |
| Denmark Data Protection Act 2018 | Denmark | Government Regulation |
| Finland Data Protection Act (1050/2018) | Finland | Government Regulation |
| Portugal Law No. 58/2019 | Portugal | Government Regulation |
| Greece Law 4624/2019 | Greece | Government Regulation |
| Czechia Act No. 110/2019 on Personal Data Processing | Czechia | Government Regulation |
| Slovakia Act No. 18/2018 on Personal Data Protection | Slovakia | Government Regulation |
| Hungary Act CXII of 2011 (Infotv) | Hungary | Government Regulation |
| Romania Law No. 190/2018 | Romania | Government Regulation |
| Bulgaria Personal Data Protection Act | Bulgaria | Government Regulation |
| Croatia Act on Implementation of the GDPR 2018 | Croatia | Government Regulation |
| Slovenia Personal Data Protection Act (ZVOP-2) | Slovenia | Government Regulation |
| Lithuania Law on Legal Protection of Personal Data | Lithuania | Government Regulation |
| Latvia Personal Data Processing Law 2018 | Latvia | Government Regulation |
| Luxembourg Data Protection Law of 1 August 2018 | Luxembourg | Government Regulation |
| Malta Data Protection Act (Cap. 586) 2018 | Malta | Government Regulation |
| Cyprus Law 125(I)/2018 | Cyprus | Government Regulation |
| Iceland Act on Data Protection No. 90/2018 | Iceland | Government Regulation |
| Ukraine Law on Protection of Personal Data (2297-VI) | Ukraine | Government Regulation |
| Serbia Law on Personal Data Protection 2018 | Serbia | Government Regulation |
| Russia Federal Law 152-FZ on Personal Data | Russia | Government Regulation |
| Belarus Law No. 99-Z on Personal Data Protection | Belarus | Government Regulation |
| Moldova Law No. 133 on Personal Data Protection | Moldova | Government Regulation |
| Albania Law No. 9887 on Protection of Personal Data | Albania | Government Regulation |
| North Macedonia Law on Personal Data Protection 2020 | North Macedonia | Government Regulation |
| Bosnia and Herzegovina Law on Protection of Personal Data | Bosnia and Herzegovina | Government Regulation |
| Montenegro Law on Personal Data Protection | Montenegro | Government Regulation |
| Kosovo Law No. 06/L-082 on Protection of Personal Data | Kosovo | Government Regulation |
| Georgia Law on Personal Data Protection 2023 | Georgia | Government Regulation |
| Armenia Law on Protection of Personal Data | Armenia | Government Regulation |
| Azerbaijan Law on Personal Data | Azerbaijan | Government Regulation |
| Liechtenstein Data Protection Act (DSG) 2018 | Liechtenstein | Government Regulation |
| Andorra Qualified Law 29/2021 on Personal Data Protection | Andorra | Government Regulation |
| Monaco Law No. 1.165 on Personal Data | Monaco | Government Regulation |
| Russia Federal Law 187-FZ on Critical Information Infrastructure | Russia | Government Regulation |
| Ukraine Law on Basic Principles of Cyber Security 2017 | Ukraine | Government Regulation |
| Georgia Law on Information Security | Georgia | Government Regulation |
| San Marino Law 171/2018 on Data Protection | San Marino | Government Regulation |
| Holy See Data Protection Framework | Holy See (Vatican) | Government Regulation |
| Gibraltar Data Protection Act 2004 | Gibraltar | Government Regulation |
| Jersey Data Protection Law 2018 | Jersey | Government Regulation |
| Guernsey Data Protection Law 2017 | Guernsey | Government Regulation |
| Isle of Man Data Protection Act 2018 | Isle of Man | Government Regulation |
| Faroe Islands Data Protection Act | Faroe Islands | Government Regulation |
| Aland Finnish Data Protection Act | Aland | Government Regulation |
Asia-Pacific (62)
| Framework | Jurisdiction | Type |
|---|---|---|
| Australia Essential Eight | Australia | Government Regulation |
| Australia Privacy Act | Australia | Government Regulation |
| Japan METI SBOM Guidelines | Japan | Government Regulation |
| India CERT-In | India | Government Regulation |
| India DPDP Act | India | Government Regulation |
| South Korea PIPA | South Korea | Government Regulation |
| Singapore Cybersecurity Act | Singapore | Government Regulation |
| New Zealand NZISM | New Zealand | Government Regulation |
| Thailand PDPA | Thailand | Government Regulation |
| China PIPL | China | Government Regulation |
| Vietnam Decree 13/2023 | Vietnam | Government Regulation |
| Philippines Data Privacy Act | Philippines | Government Regulation |
| Malaysia PDPA | Malaysia | Government Regulation |
| Indonesia PDP Law | Indonesia | Government Regulation |
| Pakistan PDPB | Pakistan | Government Regulation |
| China Data Security Law | China | Government Regulation |
| China Cybersecurity Law | China | Government Regulation |
| China MLPS 2.0 | China | Government Regulation |
| Japan APPI | Japan | Government Regulation |
| Japan ISMAP | Japan | Government Regulation |
| Korea ISMS-P | South Korea | Government Regulation |
| Hong Kong PDPO | Hong Kong | Government Regulation |
| Taiwan PDPA | Taiwan | Government Regulation |
| Singapore PDPA | Singapore | Government Regulation |
| MAS TRMG | Singapore | Government Regulation |
| Australia ACSC ISM | Australia | Government Regulation |
| Australia SOCI Act | Australia | Government Regulation |
| Macau PDPA | Macau | Government Regulation |
| Kazakhstan Law on Personal Data and its Protection | Kazakhstan | Government Regulation |
| Uzbekistan Law on Personal Data | Uzbekistan | Government Regulation |
| Kyrgyzstan Law on Personal Information | Kyrgyzstan | Government Regulation |
| Tajikistan Law on Protection of Personal Data | Tajikistan | Government Regulation |
| Turkmenistan Law on Information about Private Life | Turkmenistan | Government Regulation |
| Sri Lanka Personal Data Protection Act No. 9 of 2022 | Sri Lanka | Government Regulation |
| Nepal Individual Privacy Act 2018 | Nepal | Government Regulation |
| Myanmar Law Protecting Privacy and Security of Citizens 2017 | Myanmar | Government Regulation |
| Laos Law on Electronic Data Protection 2017 | Laos | Government Regulation |
| Brunei Personal Data Protection Order 2025 | Brunei | Government Regulation |
| Mongolia Law on Personal Data Protection 2021 | Mongolia | Government Regulation |
| Bangladesh Cyber Security Act 2023 | Bangladesh | Government Regulation |
| Papua New Guinea Cybercrime Code Act 2016 | Papua New Guinea | Government Regulation |
| Afghanistan National Privacy Framework | Afghanistan | Government Regulation |
| Bhutan ICM Act 2018 (Data Protection) | Bhutan | Government Regulation |
| Maldives National Privacy Framework | Maldives | Government Regulation |
| Timor-Leste National Privacy Framework | Timor-Leste | Government Regulation |
| DPRK National Data Framework | North Korea | Government Regulation |
| Cambodia E-Commerce Law 2019 (Data Protection) | Cambodia | Government Regulation |
| Fiji National ICT / Privacy Framework | Fiji | Government Regulation |
| Fiji Cybercrime Act 2021 | Fiji | Government Regulation |
| Samoa National ICT / Privacy Framework | Samoa | Government Regulation |
| Tonga National ICT / Privacy Framework | Tonga | Government Regulation |
| Vanuatu National ICT / Privacy Framework | Vanuatu | Government Regulation |
| Solomon Islands National ICT / Privacy Framework | Solomon Islands | Government Regulation |
| Kiribati National ICT / Privacy Framework | Kiribati | Government Regulation |
| Tuvalu National ICT / Privacy Framework | Tuvalu | Government Regulation |
| Nauru National ICT / Privacy Framework | Nauru | Government Regulation |
| Marshall Islands National ICT / Privacy Framework | Marshall Islands | Government Regulation |
| Micronesia National ICT / Privacy Framework | Micronesia | Government Regulation |
| Palau National ICT / Privacy Framework | Palau | Government Regulation |
| Guam Data Breach Law / US Frameworks | Guam | Government Regulation |
| French Polynesia Loi Informatique et Libertes | French Polynesia | Government Regulation |
| New Caledonia Loi Informatique et Libertes | New Caledonia | Government Regulation |
Middle East & Africa (76)
| Framework | Jurisdiction | Type |
|---|---|---|
| Saudi Arabia NCA ECC | Saudi Arabia | Government Regulation |
| Israel INCD | Israel | Government Regulation |
| UAE PDPL | United Arab Emirates | Government Regulation |
| UAE NESA IA Standards | United Arab Emirates | Government Regulation |
| Qatar PDPL | Qatar | Government Regulation |
| Bahrain PDPL | Bahrain | Government Regulation |
| Oman PDPL | Oman | Government Regulation |
| Egypt PDPL (Law 151/2020) | Egypt | Government Regulation |
| Turkey KVKK | Turkey | Government Regulation |
| South Africa POPIA | South Africa | Government Regulation |
| Nigeria NDPR / NDPA | Nigeria | Government Regulation |
| Kenya Data Protection Act 2019 | Kenya | Government Regulation |
| Ghana Data Protection Act | Ghana | Government Regulation |
| Saudi PDPL | Saudi Arabia | Government Regulation |
| SAMA Cybersecurity Framework | Saudi Arabia | Government Regulation |
| Kuwait Cybersecurity Law | Kuwait | Government Regulation |
| Jordan PDP Law | Jordan | Government Regulation |
| Morocco Law 09-08 | Morocco | Government Regulation |
| Lebanon Law 81 | Lebanon | Government Regulation |
| Uganda Data Protection and Privacy Act 2019 | Uganda | Government Regulation |
| Tanzania Personal Data Protection Act 2022 | Tanzania | Government Regulation |
| Rwanda Law No. 058/2021 on Protection of Personal Data | Rwanda | Government Regulation |
| Botswana Data Protection Act 2018 | Botswana | Government Regulation |
| Zimbabwe Cyber and Data Protection Act 2021 | Zimbabwe | Government Regulation |
| Zambia Data Protection Act No. 3 of 2021 | Zambia | Government Regulation |
| Angola Law No. 22/11 on Protection of Personal Data | Angola | Government Regulation |
| Mauritius Data Protection Act 2017 | Mauritius | Government Regulation |
| Madagascar Law No. 2014-038 on Protection of Personal Data | Madagascar | Government Regulation |
| Senegal Law No. 2008-12 on Protection of Personal Data | Senegal | Government Regulation |
| Cote d'Ivoire Law No. 2013-450 on Personal Data | Cote d'Ivoire | Government Regulation |
| Benin Digital Code 2018 (Personal Data) | Benin | Government Regulation |
| Togo Law No. 2019-014 on Protection of Personal Data | Togo | Government Regulation |
| Gabon Law No. 001/2011 on Protection of Personal Data | Gabon | Government Regulation |
| Tunisia Organic Law No. 2004-63 on Personal Data | Tunisia | Government Regulation |
| Algeria Law No. 18-07 on Protection of Personal Data | Algeria | Government Regulation |
| Ethiopia Personal Data Protection Proclamation 1321/2024 | Ethiopia | Government Regulation |
| Mali Law No. 2013-015 on Protection of Personal Data | Mali | Government Regulation |
| Burkina Faso Law No. 010-2004 on Personal Data | Burkina Faso | Government Regulation |
| Niger Law No. 2017-28 on Protection of Personal Data | Niger | Government Regulation |
| Chad Law No. 007/PR/2015 on Protection of Personal Data | Chad | Government Regulation |
| DR Congo Digital Code 2023 (Personal Data) | DR Congo | Government Regulation |
| Cape Verde Law No. 133/V/2001 on Personal Data | Cape Verde | Government Regulation |
| Lesotho Data Protection Act 2011 | Lesotho | Government Regulation |
| Eswatini Data Protection Act 2022 | Eswatini | Government Regulation |
| Malawi Data Protection Act 2024 | Malawi | Government Regulation |
| Seychelles Data Protection Act 2003 | Seychelles | Government Regulation |
| Zambia Cyber Security and Cyber Crimes Act 2021 | Zambia | Government Regulation |
| Tanzania Cybercrimes Act 2015 | Tanzania | Government Regulation |
| Cameroon Law 2010/012 on Cybersecurity | Cameroon | Government Regulation |
| Iran Computer Crimes Law 2009 | Iran | Government Regulation |
| Palestine Data Protection Framework | Palestine | Government Regulation |
| Iraq National Privacy Framework | Iraq | Government Regulation |
| Yemen National Privacy Framework | Yemen | Government Regulation |
| Syria National Privacy Framework | Syria | Government Regulation |
| Syria Cybercrime Law No. 20 of 2022 | Syria | Government Regulation |
| Malabo Convention (AU) - Sudan | Sudan | Government Regulation |
| Malabo Convention (AU) - South Sudan | South Sudan | Government Regulation |
| Somalia Data Protection Act 2023 | Somalia | Government Regulation |
| Malabo Convention (AU) - Libya | Libya | Government Regulation |
| Mauritania Law 2017-020 on Data Protection | Mauritania | Government Regulation |
| Malabo Convention (AU) - Gambia | Gambia | Government Regulation |
| Guinea Law L/2016/037 on Data Protection | Guinea | Government Regulation |
| Malabo Convention (AU) - Guinea-Bissau | Guinea-Bissau | Government Regulation |
| Malabo Convention (AU) - Sierra Leone | Sierra Leone | Government Regulation |
| Sierra Leone Cyber Security and Crime Act 2021 | Sierra Leone | Government Regulation |
| Malabo Convention (AU) - Liberia | Liberia | Government Regulation |
| Malabo Convention (AU) - Central African Republic | Central African Republic | Government Regulation |
| Congo Law 29-2019 on Data Protection | Republic of the Congo | Government Regulation |
| Malabo Convention (AU) - Equatorial Guinea | Equatorial Guinea | Government Regulation |
| Malabo Convention (AU) - Burundi | Burundi | Government Regulation |
| Malabo Convention (AU) - Djibouti | Djibouti | Government Regulation |
| Malabo Convention (AU) - Eritrea | Eritrea | Government Regulation |
| Malabo Convention (AU) - Comoros | Comoros | Government Regulation |
| Malabo Convention (AU) - Sao Tome | Sao Tome and Principe | Government Regulation |
| Malabo Convention (AU) - Namibia | Namibia | Government Regulation |
| Malabo Convention (AU) - Mozambique | Mozambique | Government Regulation |
International (41)
| Framework | Jurisdiction | Type |
|---|---|---|
| ISO/IEC 27001 | International | Industry Standard |
| ISO/IEC 27017 | International | Industry Standard |
| ISO/IEC 27018 | International | Industry Standard |
| ISO/IEC 5962 (SPDX) | International | Industry Standard |
| ISO 22301 | International | Industry Standard |
| ISO/IEC 20000 | International | Industry Standard |
| ISO/IEC 42001 | International | Industry Standard |
| Common Criteria (CC) | International | Industry Standard |
| PCI DSS v4.0 | International | Industry Standard |
| PCI DSS 4.0 (Full) | International | Industry Standard |
| SWIFT CSCF | International | Industry Standard |
| IEC 62443 | International | Industry Standard |
| IEC 62443-4-2 | International | Industry Standard |
| UNECE WP.29 | International | Industry Standard |
| ISO/IEC 21434 | International | Industry Standard |
| OWASP Top 10 | International | Industry Standard |
| OWASP SCVS | International | Industry Standard |
| OWASP CycloneDX BOM | International | Industry Standard |
| OWASP ASVS | International | Industry Standard |
| OWASP MASVS | International | Industry Standard |
| SLSA Supply Chain | International | Industry Standard |
| OpenChain ISO 5230 | International | Industry Standard |
| OpenSSF Scorecard | International | Industry Standard |
| CIS Controls v8 | International | Industry Standard |
| CSA STAR | International | Industry Standard |
| CSA Cloud Controls Matrix | International | Industry Standard |
| MITRE ATT&CK | International | Industry Standard |
| CycloneDX VEX | International | Industry Standard |
| ISO/IEC 29147 | International | Industry Standard |
| O-TTPS / ISO 20243 | International | Industry Standard |
| in-toto | International | Industry Standard |
| IEC 62304 | International | Industry Standard |
| DO-326A | International | Industry Standard |
| GxP (GMP/GLP/GCP) | International | Industry Standard |
| ISO/IEC 27701 | International | Industry Standard |
| ISO/IEC 27005 | International | Industry Standard |
| ISO/IEC 27002:2022 | International | Industry Standard |
| ISO/IEC 27035 | International | Industry Standard |
| ISO/IEC 27032 | International | Industry Standard |
| ISO 28000 | International | Industry Standard |
| ISO 31000 | International | Industry Standard |
Internal (11)
| Framework | Jurisdiction | Type |
|---|---|---|
| Component Health | Internal | Internal Policy |
| CISA KEV Correlation | Internal | Internal Policy |
| Supply Chain Risk Score | Internal | Internal Policy |
| Dependency Age | Internal | Internal Policy |
| License Obligations | Internal | Internal Policy |
| VEX Readiness | Internal | Internal Policy |
| Duplicate Detection | Internal | Internal Policy |
| Crypto Algorithm Audit | Internal | Internal Policy |
| Provenance Chain | Internal | Internal Policy |
| Transitive Depth | Internal | Internal Policy |
| Typosquatting Detection | Internal | Internal Policy |