Frameworks
Every framework. Continuously mapped. Always live.
One control library, one set of evidence. Each control surfaces every framework it satisfies - across 42 standards, in every region we operate, with no re-mapping.
20 of 20 frameworks
APAC · General
ACSC Essential Eight
100Australia's baseline mitigation strategies.
8 controlsOpen →APAC · Financial
APRA CPS 234
90Australian Prudential Regulation — Information Security.
36 controlsOpen →US · Government
CJIS Security Policy
86Criminal Justice Information Services.
75 controlsOpen →US · Defense
CMMC 2.0
90Cybersecurity Maturity Model Certification.
110 controlsOpen →Global · Financial
CRI Profile
93Cyber Risk Institute — financial-services aligned.
277 controlsOpen →Global · General
EU AI Act
0EU AI Act is a practical framework for organizations that need to govern AI systems with structure, evidence, and repeatability. Valystrum translates the framework into assessment controls, evidence workflows, gap analysis, remediation tracking, and continuous monitoring that scales with your organization.
41 controlsOpen →EU · Financial
EU DORA
95Digital Operational Resilience Act.
87 controlsOpen →EU · General
EU NIS2
95Network and Information Security Directive 2.
64 controlsOpen →US · Government
FedRAMP
88Federal Risk and Authorization Management Program.
325 controlsOpen →Global · General
General Data Protection Regulation (GDPR)
0Article-drivenOpen →US · Healthcare
HIPAA Security Rule
100Administrative, Physical, and Technical safeguards.
54 controlsOpen →US · Healthcare
HITRUST CSF
92Healthcare's most rigorous framework, continuously.
156 controlsOpen →Global · General
ISO/IEC 27001
100Assess ISO/IEC 27001 readiness with structured controls, evidence collection, gap analysis, remediation tracking, and continuous monitoring in Valystrum.
116 controlsOpen →Global · General
ISO/IEC 42001
0ISO/IEC 42001 is a practical framework for organizations that need to govern AI systems with structure, evidence, and repeatability. Valystrum translates the framework into assessment controls, evidence workflows, gap analysis, remediation tracking, and continuous monitoring that scales with your organization.
33 controlsOpen →Global · AI
NIST AI RMF 1.0
100NIST AI RMF, AI risk management, GOVERN MAP MEASURE MANAGE, TEVV, AI governance, AI monitoring, AI RMF implementation
114 controlsOpen →Global · General
NIST Cybersecurity Framework 2.0
0NIST Cybersecurity Framework 2.0 is a practical framework for organizations that need to manage cyber risk with structure, evidence, and repeatability. Valystrum translates the framework into assessment controls, evidence workflows, gap analysis, remediation tracking, and continuous monitoring that scales with your organization.
22 controlsOpen →Global · General
SOC 2 Type I
100Continuous governance for SOC 2 Type I - SOC 2 Type I based on the AICPA Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy with mapped controls, live evidence, and audit-ready reporting.
65 controlsOpen →Global · General
SOC 2 Type II
0SOC 2 Type II is a practical framework for organizations that need to manage cyber risk with structure, evidence, and repeatability. Valystrum translates the framework into assessment controls, evidence workflows, gap analysis, remediation tracking, and continuous monitoring that scales with your organization.
66 controlsOpen →UK · General
UK Cyber Essentials
100Baseline cyber hygiene, continuously evidenced.
5 controlsOpen →US · Privacy
USDP
88United States Data Protection framework.
47 controlsOpen →