Compliance Platform ↗Academy ↗Store ↗

The Art of Service

Compliance Intelligence API

1,120 frameworks, 51,079 controls and 315K+ verified cross-framework mappings. REST API and MCP server for AI agents.

Add to Claude Desktop, Cursor, or any MCP client:

{ "mcpServers": { "compliance": { "url": "https://api.theartofservice.com/mcp" } } }

Popular Framework APIs

ISO 27001:2022 API

123 controls · 11 domains · 79+ mappings

SOC 2 API

61 controls · 5 domains · 148+ mappings

NIST Cybersecurity Framework 2.0 API

106 controls · 7 domains · 251+ mappings

GDPR API

41 controls · 5 domains · 241+ mappings

HIPAA Security Rule API

67 controls · 5 domains · 7+ mappings

PCI DSS v4.0 API

280 controls · 16 domains · 208+ mappings

CMMC 2.0 API

110 controls · 14 domains · 11+ mappings

NIST SP 800-53 Rev 5 API

1014 controls · 20 domains · 244+ mappings

EU AI Act API

43 controls · 9 domains · 8+ mappings

ISO 42001 API

74 controls · 16 domains · 544+ mappings

CIS Controls v8 API

153 controls · 18 domains · 2+ mappings

NIS2 Directive API

28 controls · 8 domains · 147+ mappings

API pages for all 1,120 frameworks

New Zealand Information Security Manual (NZISM) · 1425 controls ASD Information Security Manual (ISM) · 1081 controls Australian Information Security Manual · 1081 controls FFIEC Cybersecurity Assessment Tool (CAT) · 491 controls Victoria Occupational Health and Safety Regulations 2017 · 442 controls FedRAMP High · 410 controls NIST SP 800-53 Revision 5.1 HIGH · 370 controls Australian Energy Sector Cyber Security Framework (AESCSF) · 354 controls FFIEC IT Examination Handbook · 348 controls Australia NDIS Practice Standards and Quality Indicators · 334 controls BRCGS Global Standard for Food Safety Issue 9 · 328 controls FedRAMP Moderate · 323 controls FBI CJIS Security Policy · 314 controls Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue · 307 controls IEC 62443 · 303 controls PCI P2PE · 295 controls NIST SP 800-53 Rev 5 MODERATE · 287 controls PCI PIN Security · 282 controls Fair Labor Association (FLA) Workplace Code of Conduct · 278 controls OSHA Safety and Health Regulations for Construction (29 CFR Part 1926) · 236 controls Australia Model Work Health and Safety Regulations · 235 controls COBIT 2019 · 231 controls Automotive SPICE (ASPICE) v4.0 - Process Assessment Model · 229 controls Protective Security Policy Framework (PSPF) Release 2024 · 220 controls RBI Cybersecurity Framework for Banks · 216 controls Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1 · 207 controls IAIS Insurance Core Principles (ICPs) · 205 controls IATA Operational Safety Audit (IOSA) Standards Manual · 205 controls ISO 19650 - Organisation and Digitisation of Information about Buildings and Civil Engineering Works (BIM) · 198 controls Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 197 controls GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6 · 191 controls NIST SP 800-161 Rev 1 · 191 controls United States State Sales Tax Economic Nexus for Remote Sellers · 188 controls EPA RCRA Hazardous Waste Management · 181 controls SSAE 18 - Attestation Standards (SOC Reporting) · 178 controls Saudi NCA ECC · 176 controls EN 50126 / EN 50128 / EN 50129 - Railway Applications RAMS · 168 controls NERC CIP · 162 controls EAR - Export Administration Regulations · 161 controls OSHA General Industry Standards (29 CFR Part 1910) · 161 controls CIS Controls v8.1 · 153 controls ACSC Essential Eight · 152 controls ASD Essential Eight Maturity Model · 152 controls NIST SP 800-53 Rev 5 LOW · 149 controls MTCS (Singapore) · 147 controls MTCS - Multi-Tier Cloud Security (Singapore) · 147 controls EN 301 549 V4.1.1 - Accessibility requirements for ICT products and services · 146 controls GLI-33 - Gaming Laboratories International Event Wagering Systems · 145 controls OpenSSF Best Practices Badge Criteria · 145 controls PCI 3DS Core Security Standard · 143 controls Australia Plumbing and Fire Sprinklers Award 2020 (MA000036) · 142 controls NFPA 1600 - Standard on Continuity, Emergency, and Crisis Management · 142 controls EU Cyber Resilience Act · 140 controls ISO 27001:2013 · 140 controls Victoria Occupational Health and Safety Act 2004 · 139 controls ISO 26262:2018 - Functional Safety for Road Vehicles · 137 controls Competition and Consumer (Consumer Data Right) Rules 2020 · 132 controls Netherlands Baseline Information Security for Government 2 (BIO2) · 132 controls WELL Building Standard v2 (International WELL Building Institute) · 126 controls ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence · 122 controls BSI C5 - Cloud Computing Compliance Criteria Catalogue · 121 controls C5 (Germany) · 121 controls Australia Electrical, Electronic and Communications Contracting Award 2020 (MA000025) · 119 controls India IS 17802 Accessibility for ICT products and services · 117 controls NHS England HTM 06-01 Electrical Services Supply and Distribution (2017 Edition) · 117 controls South Korea Cloud Security Assurance Program (CSAP) · 117 controls ICAO Annex 17 - Aviation Security (AVSEC) · 116 controls Kenya KS 2952:2022 Accessibility - ICT products and services · 116 controls Australia National Construction Code 2025 Volume One (Building Code of Australia, Class 2 to 9 Buildings) · 115 controls EN 301 549 - Accessibility requirements for ICT products and services · 115 controls ISO/IEC 17020:2012 Requirements for the operation of various types of bodies performing inspection · 115 controls ISO/SAE 21434 · 114 controls GAMP 5 - Good Automated Manufacturing Practice · 113 controls ISPE GAMP 5 - A Risk-Based Approach to Compliant GxP Computerised Systems · 113 controls BSI IT-Grundschutz · 111 controls API 1164 · 108 controls ISO 27701:2019 · 108 controls ISO/IEC 27701:2019 · 108 controls ISO/IEC 27701:2025 · 108 controls NIST Cybersecurity Framework 1.1 · 108 controls IATF 16949:2016 - Quality Management System for Automotive Production · 105 controls ISO 30414:2025 · 105 controls IEC 60601-1 - Medical Electrical Equipment Safety · 102 controls Australia Model Code of Practice: Excavation Work · 101 controls South Korea ISMS-P · 101 controls AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 100 controls IEC 62304:2015 Medical Device Software Lifecycle Processes · 99 controls ITAR - International Traffic in Arms Regulations · 99 controls ESRS (revised 2026) · 98 controls NIST Cybersecurity Framework 1.0 · 98 controls NABERS - National Australian Built Environment Rating System · 97 controls NIST SP 800-171 Rev 3 · 97 controls NIST SP 800-171A - Assessing CUI Security Requirements · 97 controls NIST SP 800-171A - Assessing Security Requirements for Controlled Unclassified Information (CUI) · 97 controls US SBA SOP 50 10 8.1 Lender and Development Company Loan Programs · 97 controls HKMA Cyber Resilience Assessment Framework (C-RAF) · 96 controls Australia OGTR Guidelines for Certification of a PC2 Large Scale Facility (Version 3.1) · 95 controls CDP (formerly Carbon Disclosure Project) · 93 controls ISO 27002:2022 · 93 controls WCAG 2.2 · 92 controls ETSI Industry Specification Group (ISG) on Quantum Key Distribution (QKD) · 91 controls US FDA Food Code 2026 · 90 controls ITU Radio Regulations and Space Security Standards · 89 controls Section 508 - ICT Accessibility (Revised) · 89 controls US Section 508 - ICT Accessibility Standards (Revised 2017) · 89 controls Australia National Pathology Standards (First Edition 2027) · 88 controls DO-254 / ED-80 - Design Assurance Guidance for Airborne Electronic Hardware · 88 controls NIST SP 800-171 · 88 controls Australia OGTR Guidelines for Certification of a PC2 Plant Facility (Version 3.2) · 87 controls ISO 21001:2018 · 87 controls ISO 21001:2025 · 87 controls Japan AI Guidelines · 87 controls Azure Security Benchmark · 85 controls UAE Virtual Asset Regulatory Authority (VARA) Regulations · 85 controls IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems · 83 controls ANSI/ASIS WVPI AA-2020 Workplace Violence and Active Assailant · 82 controls ISO 22313:2020 - Guidance on Business Continuity Management Systems · 82 controls Spain ENS · 82 controls ISO 14064 - Greenhouse Gas Accounting and Verification (Parts 1-3) · 81 controls Principles for Doing Business at Lloyd's · 81 controls Australia OGTR Guidelines for Certification of a PC2 Invertebrate Facility (Version 3.1) · 80 controls Australia OGTR Guidelines for Certification of a PC2 Aquatic Facility (Version 3.1) · 79 controls ILO Nursing Personnel Convention C149 (1977) · 79 controls ISO/IEC 23837 - Security Requirements for Quantum Key Distribution · 79 controls MDSAP Audit Approach (MDSAP AU P0002) · 79 controls NSW Food Regulation 2025 · 79 controls Nevada Gaming Control Board Cybersecurity Requirements · 79 controls SAE ARP4754B / ED-79B - Guidelines for Development of Civil Aircraft and Systems · 79 controls Australia OGTR Guidelines for Certification of a PC2 Animal Facility (Version 3.2) · 78 controls ETSI EN 303 645 · 78 controls ISO 37003:2025 · 78 controls Codex General Principles of Food Hygiene (CXC 1-1969, Rev. 2022) · 77 controls HKMA SPM · 77 controls ISO 26000:2010 · 77 controls ISO/IEC 29115:2023 - Entity Authentication Assurance Framework · 77 controls 21 CFR Part 211 - Current Good Manufacturing Practice · 76 controls Australia Fair Work Act 2009 (Cth) · 76 controls PCI SSF · 76 controls Global Cross-Border Privacy Rules (Global CBPR) Forum · 75 controls IEC 62351 - Power Systems Communication Security · 75 controls Monetary Authority of Singapore Technology Risk Management Guidelines · 75 controls AML/CTF Rules 2025 (Australia) · 74 controls ANSI/ASIS PAP.1-2012 Physical Asset Protection · 74 controls Australia Guidance for AI Adoption (2025) · 74 controls EarthCheck Company Standard Version 4.2 · 74 controls ISO/IEC 42001:2023 · 74 controls AS/NZS 3500.1:2021 Plumbing and Drainage - Water Services · 73 controls IEC 61508:2010 - Functional Safety of E/E/PE Safety-related Systems · 73 controls ISO 27799 · 73 controls ISO/IEC/IEEE 29148:2018 - Systems and Software Engineering - Requirements Engineering · 73 controls Netherlands Works Councils Act (WOR) · 73 controls Australia Work Health and Safety Act 2011 (Cth) · 72 controls ISO 8000 - Data Quality · 72 controls NIST AI Risk Management Framework (AI RMF 1.0) · 72 controls NIST SP 800-61 · 72 controls DO-178C / ED-12C - Software Considerations in Airborne Systems · 71 controls FSSC Development Program Version 2.0 · 71 controls ICH Q7 - Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients · 71 controls NSW Residential Tenancies Act 2010 · 71 controls RICS Professional Standards - Data and Technology in Property · 71 controls Australian Consumer Law (Competition and Consumer Act 2010 Schedule 2) · 70 controls DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition) · 70 controls ISO/IEC 27007:2020 · 69 controls Secure by Design: A Guide for Manufacturers (CISA) · 69 controls Germany Federal Data Protection Act (BDSG) · 68 controls ISO 22003-1:2022 Requirements for bodies providing audit and certification of food safety management systems · 68 controls ISO 30414:2018 - Human Resource Management: Guidelines for Internal and External Human Capital Reporting · 68 controls ISSB Standards · 68 controls AML/CTF Act 2006 (Australia) · 67 controls Australia Life Insurance Code of Practice (CALI Life Code) · 67 controls Australia Therapeutic Goods (Medical Devices) Regulations 2002 · 67 controls Connecticut Rules of Professional Conduct (Connecticut Practice Book) · 67 controls ISO 13485 · 67 controls ISO 13485:2016 · 67 controls India Account Aggregator Framework (RBI) · 67 controls AS/NZS 3000:2018 Electrical Installations (Wiring Rules) · 66 controls Aged Care Quality Standards (Australia) · 66 controls Germany Works Constitution Act (BetrVG) · 66 controls ILO Code of Practice on the Protection of Workers' Personal Data (1997) · 66 controls Japan FSA Cybersecurity Guidelines for Financial Institutions · 66 controls LEED v4.1 - Green Building Rating System (US Green Building Council) · 66 controls Australia OGTR Guidelines for Certification of a PC2 Laboratory (Version 3.2) · 65 controls EU Batteries Regulation (Regulation (EU) 2023/1542) · 65 controls NFPA 110-2025 Standard for Emergency and Standby Power Systems · 65 controls NIST SP 800-66 Rev 2 · 65 controls NSW Home Building Act 1989 · 65 controls SQF Code Edition 9 - Safe Quality Food · 65 controls WCO SAFE Framework of Standards to Secure and Facilitate Global Trade (2021) · 65 controls AS 1851:2012 Routine Service of Fire Protection Systems and Equipment · 64 controls Australia Model Code of Practice: Managing the Risk of Falls at Workplaces · 64 controls ISO 10006:2003 · 64 controls OpenSSF Open Source Project Security Baseline (OSPS Baseline) · 64 controls AS9100D - Aerospace Quality Management System · 63 controls AS9100D:2016 - Quality Management Systems for Aviation, Space, and Defence · 63 controls AWS Well-Architected Security Pillar · 63 controls ISO 10006:2017 · 63 controls ISO 22000:2018 · 63 controls ISO/IEC 27004:2016 · 63 controls ISO/IEC 42006:2025 · 63 controls OCC Heightened Standards (12 CFR Part 30, Appendix D) · 63 controls Queensland Residential Tenancies and Rooming Accommodation Act 2008 · 63 controls Regulation on the European Health Data Space (EHDS) · 63 controls Israel Protection of Privacy Law (5741-1981) · 62 controls Japan Act on Specified Commercial Transactions (ASCT) - Digital Services · 62 controls Protection of Privacy Law (1981) · 62 controls Australia Model Code of Practice: Healthcare and Social Assistance Industry · 61 controls Australia Standards for Registered Training Organisations 2015 · 61 controls Queensland Building and Construction Commission Act 1991 · 61 controls UK Equality Act 2010 · 61 controls Australia Corporations Act 2001 (Cth) · 60 controls Australia Public Governance, Performance and Accountability Rule 2014 (PGPA Rule) · 60 controls Solvency II · 60 controls UK Data Protection Act 2018 · 60 controls UK Data Protection Act 2018 + UK GDPR · 60 controls APEC Cross-Border Privacy Rules (CBPR) System · 59 controls AS 1684.2:2021 Residential Timber-Framed Construction - Non-Cyclonic Areas · 59 controls Aged Care Act 2024 (Australia) · 59 controls Australia National Credit Code (Schedule 1 to the National Consumer Credit Protection Act 2009) · 59 controls South Korea Credit Information Act · 59 controls AS 3740:2021 Waterproofing of Domestic Wet Areas · 58 controls Australian Dangerous Goods Code Edition 7.8 (Consignor and Transport Duties) · 58 controls IFS Wholesale / Cash & Carry Version 2 · 58 controls ISO/IEC 27031:2025 · 58 controls ISO/IEC TR 24028:2020 · 58 controls UK Construction (Design and Management) Regulations 2015 (CDM 2015) · 58 controls UK ICO Employment Practices and Data Protection: Monitoring Workers (2023) · 58 controls CCPA/CPRA · 57 controls ISO 22301 · 57 controls ISO 22301:2019 · 57 controls ISO 37500:2014 · 57 controls ISO/IEC 27400:2022 · 57 controls UNECE WP.29 R155 · 57 controls Australia Model Code of Practice: Managing Risks of Hazardous Chemicals in the Workplace · 56 controls Australia Standards for Registered Training Organisations 2025 · 56 controls Basel III International Banking Framework · 56 controls IEEE 2089-2021 Age Appropriate Digital Services Framework · 56 controls ISO 19011:2026 · 56 controls ISO 20000-1 · 56 controls ISO 9001:2015 · 56 controls ISO/IEC 27006:2024 · 56 controls ISO/IEC 29147:2018 · 56 controls Switzerland FADP · 56 controls Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023) · 56 controls Victoria Owners Corporations Act 2006 · 56 controls AS 4674-2004 Design, Construction and Fit-out of Food Premises · 55 controls BREEAM - Building Research Establishment Environmental Assessment Method · 55 controls Nigeria Data Protection Regulation (NDPR) · 55 controls Nigeria NDPR · 55 controls UK Telecommunications (Security) Act 2021 · 55 controls Australia IRAP - Information Security Registered Assessors Program · 54 controls Australian Animal Welfare Standards and Guidelines - Land Transport of Livestock · 54 controls Canada ITSG-33 - IT Security Risk Management · 54 controls ICH E6(R3) - Good Clinical Practice · 54 controls ISO/IEC 23894:2023 · 54 controls ITIL 4 · 54 controls Senge Fifth Discipline - Learning Organization · 54 controls TNFD Recommendations · 54 controls ACT Residential Tenancies Act 1997 · 53 controls EMV 3‑D Secure (3DS) - Payment Authentication Protocol · 53 controls EU Accounting Directive (Directive 2013/34/EU) · 53 controls IS 14489:2018 Occupational Safety and Health Audit Code of Practice · 53 controls ISO 20400:2017 - Sustainable Procurement · 53 controls ISO/IEC 38500:2024 · 53 controls ISO/IEC 38500:2024 - Governance of IT · 53 controls Jordan Draft Personal Data Protection Law (2022) · 53 controls Victoria Child Safe Standards (2022) · 53 controls WHO Global Model Regulatory Framework for Medical Devices including In Vitro Diagnostic Medical Devices · 53 controls eIDAS 2.0 - EU Digital Identity Regulation · 53 controls Albania Law No. 124/2024 on Personal Data Protection · 52 controls Albania Law on Protection of Personal Data (Law No. 9887, 2008, amended 2014) · 52 controls Australia Privacy (Credit Reporting) Code 2025 · 52 controls CNIL Guidance on Employee Monitoring and Workplace Video Surveillance · 52 controls ISO 56002 · 52 controls ISO/IEC 27037:2012 · 52 controls Law No. 172-13 on the Protection of Personal Data · 52 controls NIST SP 800-181 · 52 controls TSA Pipeline Security · 52 controls AASB S2 Climate-related Disclosures · 51 controls Arizona Air Quality Regulations (ADEQ / ARS Title 49 / AAC Title 18 Chapter 2) · 51 controls Australia National Construction Code 2025 Volume Three (Plumbing Code of Australia) · 51 controls Australia Telecommunications Consumer Protections Code (C628:2019, Variation 1/2022) · 51 controls BSI PAS 1880:2020 · 51 controls EDM Council CDMC - Cloud Data Management Capability Framework · 51 controls EPA Risk Management Program (40 CFR Part 68) · 51 controls EU ATEX Directive (Directive 2014/34/EU) · 51 controls ISO 37000:2021 · 51 controls ISO 37000:2021 - Governance of Organizations · 51 controls ISO/IEC 11179 Metadata Registries (MDR) · 51 controls NIST SP 800-207 · 51 controls Streamlined Sales and Use Tax Agreement (SSUTA) · 51 controls AS/NZS 3010:2017 Electrical Installations Generating Sets · 50 controls Ahpra Shared Code of Conduct (2022) · 50 controls ISO/IEC 27011:2024 · 50 controls Australia Model Code of Practice: Construction Work · 49 controls Australia Model Code of Practice: Managing the Risks of Plant in the Workplace · 49 controls Australia National Vocational Education and Training Regulator Act 2011 · 49 controls ISO 19011:2018 · 49 controls ISO 22361:2022 · 49 controls NIST SP 800-160 · 49 controls Psychology Board of Australia Code of Conduct for Psychologists (2025) · 49 controls TSA Pipeline Cybersecurity Directives · 49 controls UK ONR Cyber Security and Information Assurance (CSIA) for Nuclear Facilities · 49 controls AS 1428.1:2021 Design for Access and Mobility - General Requirements for Access, New Building Work · 48 controls Administrative Measures for the Security Assessment of Generative AI Services (2023) and Algorithmic Recommendation Management Provisions (2022) · 48 controls Australia National Construction Code 2022 Volume Two (Building Code of Australia, Class 1 and 10 Buildings) · 48 controls Australia National Safety and Quality Health Service (NSQHS) Standards Second Edition · 48 controls Australia Public Governance, Performance and Accountability Act 2013 (PGPA Act) · 48 controls Ley Orgánica de Protección de Datos Personales (LOPDP) · 48 controls Montenegro Law on Personal Data Protection (2023) · 48 controls NIST SP 800-82 Rev 3 · 48 controls NIST SP 800-82 Rev 3 - Guide to OT Security · 48 controls Spain Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD) · 48 controls Australia National Construction Code 2025 Volume Two (Building Code of Australia, Class 1 and 10 Buildings) · 47 controls ISAE 3402 - Assurance Reports on Controls at a Service Organisation · 47 controls ISO 37001:2025 · 47 controls Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) · 47 controls US Clinical Laboratory Improvement Amendments (CLIA) Regulations (42 CFR Part 493) · 47 controls Australia OGTR Guidelines for Certification of a PC2 Constant Temperature Room (Version 2.1) · 46 controls CISA Zero Trust Maturity Model · 46 controls EN 50716:2023 - Railway Applications - Requirements for Software Development · 46 controls FedRAMP Rev 5 · 46 controls ISO 22002-100:2025 Prerequisite programmes on food safety, Part 100: Requirements for the food, feed and packaging supply chain · 46 controls JFS-B Standard Ver. 3.1 Food Safety Management (Japan) · 46 controls Malaysia PDPA 2010 · 46 controls NSW AI Operational Policy (2026) · 46 controls South Korea Korea Internet Self-Governance Organisation (KISO) Code of Ethics · 46 controls UK HM Treasury Sustainability Reporting Guidance 2026-27 (FReM) · 46 controls UNECE WP.29 R156 · 46 controls Australia General Retail Industry Award 2020 (MA000004) · 45 controls Australia Hospitality Industry (General) Award 2020 (MA000009) · 45 controls DoD Zero Trust Reference Architecture · 45 controls Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) · 45 controls IFRS 17 - Insurance Contracts · 45 controls ISO/IEC 27040:2024 · 45 controls Montana Consumer Data Privacy Act · 45 controls NIST SP 800-190 · 45 controls UK Gambling Commission - Cyber Resilience Requirements · 45 controls US ITAR and EAR - Export Control and Data Security · 45 controls Vermont Artificial Intelligence and Consumer Data Act (AICDA) · 45 controls Vermont Data Privacy and Online Surveillance Act · 45 controls APRA CPS 230 Operational Risk Management · 44 controls Act on the Implementation of the General Data Protection Regulation (OG 42/2018) · 44 controls Australian Animal Welfare Standards and Guidelines - Exhibited Animals · 44 controls Bank Secrecy Act / Anti-Money Laundering (BSA/AML) · 44 controls Belgium CyberFundamentals · 44 controls Croatia Act on Implementation of the GDPR (Official Gazette 42/2018) · 44 controls DISA Security Technical Implementation Guides (STIGs) · 44 controls Florida Digital Bill of Rights (FDBR) · 44 controls Florida Digital Bill of Rights (SB 262) · 44 controls Ghana Cybersecurity Act · 44 controls ISO 27017:2015 · 44 controls ISO 37002:2021 - Whistleblowing Management Systems · 44 controls NIST SP 1800-32 · 44 controls SLSA · 44 controls UK GDPR (UK General Data Protection Regulation) · 44 controls US Fair Debt Collection Practices Act (FDCPA) and Regulation F (12 CFR Part 1006) · 44 controls US No Surprises Act (42 USC 300gg-111 to 300gg-139) and 45 CFR Part 149 · 44 controls 3GPP Security Architecture (TS 33.501, 5G Security) · 43 controls Australia Model Code of Practice: Hazardous Manual Tasks · 43 controls Australia Model Code of Practice: Managing Psychosocial Hazards at Work · 43 controls Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019) · 43 controls EU Statutory Audit Directive (Directive 2006/43/EC) · 43 controls ISO 22320:2018 · 43 controls ISO 28000:2022 · 43 controls ISO 37101:2016 · 43 controls ISO/IEC 27017:2026 · 43 controls UK Companies Act 2006 · 43 controls ANSSI Guide d'hygiene informatique (42 mesures, v2.0) · 42 controls AS/NZS 4836:2023 Safe Working on or near Low-Voltage and Extra-Low Voltage Electrical Installations and Equipment · 42 controls Aged Care Quality Standards 2019 (repealed edition) · 42 controls Australia National Principles for Child Safe Organisations (2019) · 42 controls Authorised Economic Operator (AEO) Programmes - Global Standards · 42 controls EU ESPR (Regulation (EU) 2024/1781) · 42 controls Egypt Personal Data Protection Law (Law No. 151 of 2020) · 42 controls ISO 27005:2022 · 42 controls ISO 37301 · 42 controls ISO 37301:2021 · 42 controls NAIC Insurance Data Security Model Law (MDL-668) · 42 controls NAIC MDL-668 · 42 controls NIST SP 800-218 · 42 controls Article 29 Working Party Opinion 2/2017 on Data Processing at Work (WP249) · 41 controls Australia Model Code of Practice: Managing the Work Environment and Facilities · 41 controls Australian Animal Welfare Standards and Guidelines - Poultry · 41 controls ISO 14004:2016 · 41 controls ISO 14068-1:2023 · 41 controls ISO 27018:2019 · 41 controls ISO/DIS 45001:2026 · 41 controls ISO/IEC 19796-1:2005 · 41 controls ISO/IEC 27018:2019 · 41 controls ISO/IEC 27031:2011 · 41 controls UK NCSC Cyber Assessment Framework · 41 controls APRA CPS 220 Risk Management · 40 controls Australia My Health Records Act 2012 · 40 controls Australia National Consumer Credit Protection Act 2009 (Cth) · 40 controls Australia National Quality Standard for Education and Care Services (ACECQA) · 40 controls Azerbaijan Law on Personal Data (2010) · 40 controls BIMCO Cyber Security · 40 controls DORA RTS on ICT Risk Management Framework (Commission Delegated Regulation (EU) 2024/1774) · 40 controls FATF 40 Recommendations · 40 controls ICMM Mining Principles (2024 Update) · 40 controls ISO 45001:2018 · 40 controls LGPD · 40 controls Space ISAC (Information Sharing and Analysis Center) - Threat Framework · 40 controls Texas State Fire Marshal Rules (28 TAC Chapter 34, Subchapters C, E, F and G) · 40 controls CFTC System Safeguards (17 CFR 37, 38, 39, 49) · 39 controls EU Better Internet for Kids (BIK+) Strategy · 39 controls EU Capital Requirements Regulation (Regulation (EU) No 575/2013) · 39 controls ISO 37009:2025 · 39 controls ISO/IEC 17025:2017 - General Requirements for Testing and Calibration · 39 controls ISO/IEC 17025:2017 - General Requirements for Testing and Calibration Laboratories · 39 controls ISO/IEC 42005:2025 · 39 controls Italy Personal Data Protection Code (Legislative Decree No. 196/2003, amended 2018) · 39 controls NIST SP 800-128 · 39 controls Truth in Lending Act (TILA) · 39 controls Aged Care Infection Prevention and Control Guide (2024) · 38 controls Australia Therapeutic Goods Act 1989 · 38 controls Data (Use and Access) Act 2025 · 38 controls EU REACH Regulation (Regulation (EC) No 1907/2006) · 38 controls FISMA · 38 controls Greece Law 4624/2019 - Hellenic Data Protection Authority (HDPA) Implementation Act · 38 controls ISO 10002:2018 · 38 controls ISO 37001:2016 · 38 controls ISO 55001:2024 · 38 controls ISO/IEC 27018:2025 · 38 controls PDPA Thailand · 38 controls UK Online Safety Act 2023 · 38 controls US Federal Motor Carrier Safety Regulations (49 CFR Parts 350 to 399) · 38 controls AICPA SOC 1 · 37 controls ASD Strategies to Mitigate Cyber Security Incidents · 37 controls ASEAN Guide on AI Governance and Ethics · 37 controls Australia Health Practitioner Regulation National Law 2009 · 37 controls Australia Health Professionals and Support Services Award 2020 (MA000027) · 37 controls Australia Model Code of Practice: How to Manage Work Health and Safety Risks · 37 controls Australia OGTR Guidelines for Certification of a PC2 Large Grazing Animal Facility (Version 1.1) · 37 controls EDPB Guidelines 3/2019 on Processing of Personal Data through Video Devices · 37 controls ISO 27043 · 37 controls ISO 28002:2011 · 37 controls ISO/IEC 27050-1:2019 · 37 controls Regulation (EU) 2023/1115 on deforestation-free supply chains · 37 controls Rwanda DPL · 37 controls SOC 1 (SSAE 18 / ISAE 3402) · 37 controls SSAE 18 SOC 1 - Report on Controls at a Service Organisation (ICFR) · 37 controls Sri Lanka Personal Data Protection Act (No. 9 of 2022) · 37 controls US Executive Order 14028 - Improving the Nation's Cybersecurity · 37 controls Australian Education Services for Overseas Students Act 2000 and National Code 2018 (Australia) · 36 controls BSIMM · 36 controls China PIPL · 36 controls China Personal Information Protection Law (PIPL) · 36 controls Digital Services Act (DSA) - Regulation (EU) 2022/2065 · 36 controls ISO 10005:2018 · 36 controls ISO 15489-1:2016 · 36 controls Italy Workers' Statute (Law 300/1970) · 36 controls Kuwait Data Privacy Protection Regulation (KDPPR, 2021 - CMA Directive) · 36 controls NFPA 70 National Electrical Code 2023 Article 700 Emergency Systems · 36 controls NSA Guidance for Transition to Quantum-Resistant Cryptography · 36 controls NSA Quantum-Resistant (QR) Cryptography Migration Guidance · 36 controls Netherlands GDPR Implementation Act (UAVG - Uitvoeringswet AVG, 2018) · 36 controls Paraguay Law No. 7593/2025 on Personal Data Protection · 36 controls UK Cyber Essentials · 36 controls UK ICO Guidance on Video Surveillance including CCTV (2022) · 36 controls ACT Veterinary Practice Act 2018 · 35 controls Australia Commonwealth Procurement Rules (17 November 2025) · 35 controls Australia Model Code of Practice: Safe Design of Structures · 35 controls Australia National Disability Insurance Scheme Act 2013 · 35 controls Australia Online Safety Act 2021 · 35 controls CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 35 controls Dental Board of Australia Infection Prevention and Control Guidance (2024) · 35 controls FSSC 24000 Social Management System Certification Scheme Version 1.0 · 35 controls IEEE 7000 · 35 controls ISO 10005:2005 · 35 controls ISO 14001:2026 · 35 controls ISO 28001:2007 Supply Chain Security Management · 35 controls ISO 37004:2023 · 35 controls Mauritius DPA · 35 controls NIST SP 800-150 · 35 controls NIST SP 800-172 · 35 controls New Hampshire Data Privacy Act · 35 controls New Hampshire Privacy Act · 35 controls New Jersey Data Privacy Act · 35 controls Online Safety Act 2021 (Australia) · 35 controls Singapore Government Instruction Manual on ICT&SS Management (IM8) · 35 controls UK Privacy and Electronic Communications Regulations 2003 (PECR) · 35 controls UNESCO Recommendation on the Ethics of AI · 35 controls Voluntary Principles on Security and Human Rights (VPs) · 35 controls Aged Care Serious Incident Response Scheme (SIRS) Provider Guidance · 34 controls Argentina Law 25.326 (Personal Data Protection Law) · 34 controls Digital Economy Partnership Agreement (DEPA) · 34 controls EASA Part-IS - Information Security in Aviation · 34 controls EDM Council DCAM - Data Management Capability Assessment Model · 34 controls IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.2) · 34 controls ISO/IEC 29134:2023 · 34 controls NFPA 111-2025 Standard on Stored Electrical Energy Emergency and Standby Power Systems · 34 controls NIST SP 800-124 Rev 2 - Mobile Device Security · 34 controls NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices · 34 controls NIST SP 800-161 · 34 controls SWIFT CSCF · 34 controls SWIFT CSCF v2024 · 34 controls SWIFT CSP · 34 controls SWIFT Customer Security Programme (CSP) · 34 controls Serbia Law on Personal Data Protection (2018) · 34 controls South Korea PIPA · 34 controls South Korea Personal Information Protection Act (PIPA) · 34 controls Virginia CDPA · 34 controls Virginia Consumer Data Protection Act (VCDPA) · 34 controls Virginia VCDPA · 34 controls AASB 18 Presentation and Disclosure in Financial Statements · 33 controls Australia Model Code of Practice: Preparation of Safety Data Sheets for Hazardous Chemicals · 33 controls Australia Telecommunications (Consumer Complaints Handling) Industry Standard 2018 · 33 controls BSI NESAS Product Certification Scheme (NESAS-Produkte) · 33 controls ISO 22398:2013 · 33 controls ISO 37302:2025 · 33 controls ISO 37303:2025 · 33 controls ISO 46001:2019 · 33 controls NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production · 33 controls NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity · 33 controls Samoa Telecommunications Act (2005) - Privacy & Data Protection · 33 controls W3C Verifiable Credentials (VC) Data Model 2.0 · 33 controls ASIC Market Integrity Rules (Securities Markets) 2017 (Australia) · 32 controls Australia National Framework for the Assurance of AI in Government (2024) · 32 controls Australia Tax Agent Services Act 2009 (Cth) · 32 controls Botswana Data Protection Act (2024) · 32 controls EU Platform Work Directive (Directive 2024/2831) · 32 controls IEC 31010:2019 · 32 controls ISO 14001:2015 · 32 controls ISO 20121:2024 · 32 controls ISO 21448:2022 · 32 controls ISO 45004:2024 · 32 controls ISO/IEC 27041:2015 · 32 controls Kolb Experiential Learning Cycle · 32 controls NIST SP 800-187 · 32 controls Proposal for a Directive on improving working conditions in platform work (COM(2023) 491) · 32 controls Responsible Minerals Initiative (RMI) - Responsible Minerals Assurance Process · 32 controls Security of Critical Infrastructure Act 2018 (SOCI) · 32 controls Senegal Law on Personal Data Protection (Law No. 2008-12) · 32 controls Singapore Payment Services Act (PSA) - Digital Payment Token Regulation · 32 controls Singapore Payment Services Act 2019 (PSA) - Digital Payment Token Provisions · 32 controls WHO Global Strategy on Digital Health 2020-2025 · 32 controls AICPA SOC 3 · 31 controls AMIC Industry Animal Welfare Standard for Livestock Processing Establishments · 31 controls Australia Model Code of Practice: Work Health and Safety Consultation, Cooperation and Coordination · 31 controls Automotive SPICE for Cybersecurity PAM v2.0 · 31 controls Brunei Personal Data Protection Order 2022 (PDPO) · 31 controls Canadian PIPEDA · 31 controls Code of Conduct on Data Protection for Research (GDPR Article 40) · 31 controls Cyber Security Act 2024 (Australia) · 31 controls FATF Recommendation 16 - Virtual Asset Travel Rule · 31 controls Heifetz Adaptive Leadership Framework · 31 controls ISO 45003:2021 · 31 controls ISO/IEC 27010:2015 · 31 controls Indiana Consumer Data Protection Act · 31 controls PIPEDA · 31 controls SEC Climate Disclosure Rule · 31 controls Saudi Arabia PDPL · 31 controls Saudi PDPL · 31 controls US OFAC Sanctions Compliance Framework · 31 controls WHO Global Competency Model · 31 controls APPI · 30 controls Australian Government Data Governance Framework (2025) · 30 controls Brazil Open Finance (Resolução Conjunta No. 1/2020) · 30 controls CSRD · 30 controls Cefic Responsible Care Management Framework · 30 controls Chile Personal Data Protection Law (Law No. 21.719) · 30 controls EU Audiovisual Media Services Directive (AVMSD, Directive 2010/13/EU as amended by Directive 2018/1808 and Directive (EU) 2023/2586) · 30 controls EU Clinical Trials Regulation (CTR 536/2014) · 30 controls EU Union Customs Code (UCC) - Data Protection and Security Provisions (Regulation 952/2013) · 30 controls ISO/IEC 27050 - Electronic Discovery (Parts 1-4) · 30 controls NIST SP 800-183 · 30 controls NIST SP 800-53A · 30 controls NIST SP 800-53A Rev. 5 · 30 controls Philippines DPA · 30 controls Philippines Data Privacy Act · 30 controls Philippines Data Privacy Act (RA 10173) · 30 controls Singapore Protection from Online Falsehoods and Manipulation Act (POFMA, 2019) · 30 controls UK Defence Standard 05-138 - Cyber Security for Defence Suppliers · 30 controls Union Customs Code (UCC) - Regulation (EU) No 952/2013 · 30 controls Zimbabwe Data Protection Act (2021) · 30 controls ACT Medicines, Poisons and Therapeutic Goods Act 2008 · 29 controls ASIC Cyber Resilience Good Practices · 29 controls Australia General Insurance Code of Practice (2020 Code as updated) · 29 controls Australia R&D Tax Incentive (Income Tax Assessment Act 1997 Division 355) · 29 controls Bahrain PDPL · 29 controls EU Food Information to Consumers Regulation (EU) No 1169/2011 · 29 controls EU Voluntary Sustainability Reporting Standard (VSME, Delegated Regulation (EU) 2026/1560) · 29 controls FAA AC 20-152A - Development Assurance for Airborne Electronic Hardware · 29 controls ISO 37005:2024 · 29 controls ISO 50001:2018 - Energy Management Systems · 29 controls Minnesota Rules of the Board of Continuing Legal Education · 29 controls NIST SP 800-88 Rev 1 · 29 controls TEFCA - Trusted Exchange Framework and Common Agreement · 29 controls Taiwan PDPA · 29 controls APRA SPS 220 Risk Management (Superannuation) · 28 controls African Union Malabo Convention · 28 controls Australia Insurance Contracts Act 1984 (Cth) · 28 controls Brazil AI Framework · 28 controls Cyber Essentials Plus · 28 controls ENISA Data Protection Engineering - From Theory to Practice · 28 controls EU NIS2 Directive - Transport Sector Requirements · 28 controls ISO 22318 · 28 controls ISO 31000 · 28 controls ISO 31000:2018 · 28 controls ISO/IEC 27557:2022 - Organisational Privacy Risk Management · 28 controls ISO/IEC 30111:2019 · 28 controls Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data · 28 controls Minnesota Consumer Data Privacy Act · 28 controls Morocco Data Protection Law (09-08) · 28 controls NIS2 Directive Implementing Acts · 28 controls Nigeria Data Protection Act 2023 (NDPA) · 28 controls Nigeria Data Protection Regulation (NDPR) and Nigeria Data Protection Act (NDPA) · 28 controls OAIC Privacy Management Framework · 28 controls PSD2 SCA · 28 controls Paraguay Law on Protection of Personal Data (Law No. 6534/2020) · 28 controls Queensland Body Corporate and Community Management Act 1997 · 28 controls Russia FZ-152 · 28 controls Russia Federal Law on Personal Data (152-FZ) · 28 controls Singapore AI Governance Framework · 28 controls Singapore Model AI Governance Framework (2nd Edition) · 28 controls Sweden Data Protection Act (Dataskyddslag, 2018:218) · 28 controls TISAX - Trusted Information Security Assessment Exchange · 28 controls Tanzania Personal Data Protection Act (Draft) · 28 controls US DOT Hazardous Materials Regulations (49 CFR Parts 171 to 180) · 28 controls US Gramm-Leach-Bliley Act (GLBA) - Higher Education Safeguards Rule · 28 controls World Bank Group General EHS Guidelines · 28 controls ASEAN Data Management Framework · 27 controls ASIS SPC.1-2009 - Organizational Resilience Standard · 27 controls Australia Competition and Consumer Act 2010 Parts IV and IVA (Restrictive Trade Practices and Merger Notification) · 27 controls Australia NHMRC National Statement on Ethical Conduct in Human Research · 27 controls Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct · 27 controls Colombia Data Protection Law (Law 1581 of 2012 - SIC Oversight) · 27 controls Colombia Data Protection Law (Law 1581 of 2012) · 27 controls ESRB Privacy Certified · 27 controls EU Data Act · 27 controls EU Omnibus I Directive (Directive (EU) 2026/470) · 27 controls ISO 39001:2012 - Road Traffic Safety Management · 27 controls ISO 41001:2018 - Facility Management Systems · 27 controls ISO 55001:2014 · 27 controls Mexico LFPDPPP · 27 controls NATO STANAG 4774/4778 Confidentiality Metadata Labels · 27 controls South Africa Promotion of Access to Information Act (PAIA) · 27 controls Trinidad and Tobago Data Protection Act 2011 · 27 controls AASB 101 Presentation of Financial Statements · 26 controls ACCME Accreditation Requirements and Standards for Integrity and Independence in Accredited Continuing Education · 26 controls AICPA Privacy Management Framework (PMF) · 26 controls AS/NZS 1891.4:2009 Industrial Fall-Arrest Systems and Devices - Selection, Use and Maintenance · 26 controls AS/NZS 4801:2001 Occupational Health and Safety Management Systems (superseded edition) · 26 controls ATO Digital Service Provider (DSP) Operational Security Framework · 26 controls Australia Poisons Standard (SUSMP) · 26 controls Australia Psychology Board Registration Standards 2025 · 26 controls Australian Animal Welfare Standards and Guidelines - Goats · 26 controls Australian Education Regulations 2023 (Australia) · 26 controls Connecticut Data Privacy Act (CTDPA) · 26 controls DORA · 26 controls EU Chips Act (Regulation (EU) 2023/1781) · 26 controls EU Digital Markets Act · 26 controls EU In Vitro Diagnostic Medical Devices Regulation (IVDR) · 26 controls EU Medical Devices Regulation (MDR 2017/745) · 26 controls FTC GLBA Safeguards Rule (16 CFR Part 314) · 26 controls FTC Safeguards Rule (16 CFR Part 314) · 26 controls ISO 30401 · 26 controls ISO/IEC 27003:2017 · 26 controls Queensland Child Safe Organisations Act 2024 · 26 controls Regulation (EU) 2026/2108 establishing the Union Customs Code and the European Union Customs Authority · 26 controls Singapore Cybersecurity Act 2018 · 26 controls TQCSI HACCP Code:2024 · 26 controls UK Building Safety Act 2022 · 26 controls UN Guiding Principles on Business and Human Rights (UNGPs) · 26 controls Uganda Data Protection and Privacy Act (2019) · 26 controls 21 CFR Part 58 - Good Laboratory Practice (GLP) · 25 controls Australia NDIS Incident Management and Reportable Incidents Rules 2018 · 25 controls Australia NDIS Restrictive Practices and Behaviour Support Rules 2018 · 25 controls Australia Telecommunications (Financial Hardship) Industry Standard 2024 · 25 controls CWE Top 25 Most Dangerous Software Weaknesses (2024) · 25 controls EIOPA Guidelines on ICT Security and Governance (EIOPA-BoS-20/600) · 25 controls Estonia Personal Data Protection Act (Isikuandmete kaitse seadus, 2019) · 25 controls HIPAA Privacy Rule · 25 controls ISO 22317 · 25 controls MDS2 (Medical Device) · 25 controls Malta Data Protection Act (Cap. 586, 2018) · 25 controls Maslach Burnout Inventory (MBI) and Areas of Worklife Survey (AWS) Model · 25 controls Netherlands PQC Migration Handbook (AIVD, CWI, TNO, 2nd Edition 2024) · 25 controls POPIA · 25 controls Queensland Property Law Act 2023 · 25 controls SIG (Shared Assessments) · 25 controls Science Based Targets Initiative (SBTi) - Net-Zero Standard · 25 controls South African POPIA · 25 controls Tunisia Organic Law on Personal Data Protection (Law No. 2004-63) · 25 controls US FDA Food Labeling Regulations (21 CFR Part 101) · 25 controls APRA CPS 234 · 24 controls APRA Prudential Standard CPS 234 - Information Security (Australia) · 24 controls Australia Consumer Data Right - Banking (CDR) · 24 controls Bermuda Personal Information Protection Act 2016 (PIPA) · 24 controls CNCF Security Technical Advisory Group (TAG) · 24 controls CPMI-IOSCO Principles for Financial Market Infrastructures · 24 controls Costa Rica Personal Data Protection Law (Law No. 8968) · 24 controls Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP · 24 controls Critical Infrastructure Risk Management Program (CIRMP) Rules 2023 · 24 controls EU Carbon Border Adjustment Mechanism (CBAM) · 24 controls Ethiopia Personal Data Protection Proclamation (No. 1321/2024) · 24 controls GHG Protocol Corporate Value Chain (Scope 3) Standard · 24 controls Goleman Emotional Intelligence Leadership Framework · 24 controls ISO 31022:2020 · 24 controls ISO/IEC 27034-2:2015 Application security, Part 2: Organization normative framework · 24 controls OECD Due Diligence Guidance for Responsible AI (2026) · 24 controls SA8000:2014 - Social Accountability Standard · 24 controls The Leadership Challenge (Kouzes & Posner) · 24 controls US Executive Order 14144 - Strengthening and Promoting Innovation in the Nation's Cybersecurity · 24 controls US Magnuson-Moss Warranty Act (15 USC 2301-2312) · 24 controls US Section 504 of the Rehabilitation Act (29 USC 794) and HHS Rule 45 CFR Part 84 · 24 controls Uruguay DPL · 24 controls Wisconsin Data Privacy Act (SB 670) · 24 controls ASA 315 Identifying and Assessing the Risks of Material Misstatement (Australia, equivalent of ISA 315 (Revised 2019)) · 23 controls ASAE 3100 Compliance Engagements (AUASB, December 2022) · 23 controls Angola Personal Data Protection Law (Law No. 22/11) · 23 controls Australia MBS Complex Neurodevelopmental Disorder and Disability Allied Health Items 2026 · 23 controls Barbados Data Protection Act 2019 · 23 controls Bosnia and Herzegovina Law on Protection of Personal Data (2006, amended 2011) · 23 controls FSSC 22000 - Food Safety System Certification · 23 controls France Labour Code (Code du travail) - Employee Monitoring and CSE Consultation · 23 controls Hersey & Blanchard Situational Leadership Model · 23 controls Iowa Client Trust Account Rules (Iowa Court Rules Chapter 45) · 23 controls NY DFS 23 NYCRR 500 · 23 controls NYDFS Cybersecurity Regulation (23 NYCRR Part 500) · 23 controls Regulation (EU) 2019/1239 on the Maritime Single Window (MSW) · 23 controls Tonga Communications Act (2015) - Privacy & Data Protection · 23 controls UK FCA Consumer Duty (Principle 12 and PRIN 2A) · 23 controls US Investment Advisers Act of 1940 and SEC Adviser Rules (17 CFR Part 275) · 23 controls AASB 10 Consolidated Financial Statements · 22 controls AASB 107 Statement of Cash Flows · 22 controls ACT Workplace Privacy Act 2011 · 22 controls AS 3745-2010 Planning for Emergencies in Facilities · 22 controls Australia Food Standards Code Standard 3.2.2 Food Safety Practices and General Requirements · 22 controls Australia NDIS Qualification and Professional Associations Required Documentation Guide 2025 · 22 controls C2M2 · 22 controls CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act) · 22 controls Canada's Anti-Spam Legislation (CASL) · 22 controls Cayman Islands Data Protection Act 2017 (DPA) · 22 controls Critical Raw Materials Act (Proposed Regulation COM(2023) 192) · 22 controls DO-326A / ED-202A · 22 controls Danish Data Protection Act (Databeskyttelsesloven) · 22 controls Directive (EU) 2023/970 on pay transparency · 22 controls EU General Product Safety Regulation (GPSR, Regulation 2023/988) · 22 controls EU Markets in Crypto-Assets Regulation (MiCA) · 22 controls EU Markets in Crypto-Assets Regulation (MiCA, Regulation 2023/1114) · 22 controls EU Pay Transparency Directive (Directive 2023/970) · 22 controls HITECH Act · 22 controls Portugal Law No. 58/2019 - Data Protection Implementation Act · 22 controls SOC for Cybersecurity - Cybersecurity Risk Management Examination · 22 controls The CAP Code (UK Code of Non-broadcast Advertising and Direct & Promotional Marketing), Edition 12 · 22 controls UK FCA/PRA Operational Resilience Framework · 22 controls UK PSTI Act · 22 controls UK Product Security and Telecommunications Infrastructure Act (PSTI) · 22 controls UK Security and Emergency Measures Direction (SEMD) - Water Industry · 22 controls UNICEF Policy Guidance on AI for Children (2021) · 22 controls US Medicare Provider and Supplier Enrollment (42 CFR Part 424 Subpart P) · 22 controls US Uniform Commercial Code Article 9 Secured Transactions · 22 controls Vietnam PDPD · 22 controls Vietnam PDPL (Decree 13) · 22 controls ASIC Regulatory Guide 274 Product Design and Distribution Obligations (Australia) · 21 controls Australia Franchising Code of Conduct (Franchising Regulations 2024) · 21 controls Australia NDIS Provider Registration Rules 2018 · 21 controls Australia Reducing Scam Calls and Scam SMs Industry Code (C661:2022) · 21 controls Australia Superannuation Industry (Supervision) Act 1993 (Cth) · 21 controls Colorado Privacy Act · 21 controls Colorado Privacy Act (CPA) · 21 controls Czech Republic Act on Personal Data Processing (Act No. 110/2019 Sb.) · 21 controls Czech Republic Act on the Protection of Personal Data (Act No. 110/2019 Coll.) · 21 controls Defence Security Principles Framework (DSPF) · 21 controls Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law · 21 controls EU Energy Performance of Buildings Directive (EPBD Recast) - Directive (EU) 2024/1275 · 21 controls EU European Media Freedom Act (EMFA) · 21 controls EU Whistleblower Protection Directive (2019/1937) · 21 controls ISO/IEC 23053:2022 · 21 controls Ireland European Union (Accessibility Requirements of Products and Services) Regulations 2023 (S.I. No. 636 of 2023) · 21 controls NAIC Annual Financial Reporting Model Regulation (Model Audit Rule, MDL-205) · 21 controls SANS Incident Handler's Handbook and PICERL Methodology · 21 controls Therapeutic Goods Legislation Amendment (Australian Unique Device Identification Database and Other Measures) Regulations 2025 · 21 controls UK Bribery Act 2010 · 21 controls AS/NZS 3760:2022 In-Service Safety Inspection and Testing of Electrical Equipment and RCDs · 20 controls Argyris Double-Loop Learning · 20 controls Australia NDIS Pricing Arrangements 2026-27 · 20 controls Belgium Data Protection Act (Wet van 30 juli 2018, Loi du 30 juillet 2018) · 20 controls COSO ERM · 20 controls COSO Enterprise Risk Management (ERM) Framework (2017) · 20 controls California Civil Code Section 1950.5 (Residential Security Deposits) · 20 controls China Cybersecurity Law (CSL) · 20 controls ECB TIBER-EU Framework · 20 controls EU Directive (EU) 2018/1673 on combating money laundering by criminal law · 20 controls EU Machinery Regulation (Regulation (EU) 2023/1230) · 20 controls French Sapin II Law (Law No. 2016-1691) · 20 controls ISO/IEC 29100:2024 · 20 controls LEADS in a Caring Environment · 20 controls Lloyd's of London Cyber Insurance Requirements and Underwriting Standards · 20 controls NSW Fair Trading Act 1987 · 20 controls OpenSSF Scorecard · 20 controls PDPA Singapore · 20 controls Peru DPL · 20 controls Science Based Targets initiative (SBTi) Corporate Standard · 20 controls Singapore PDPA · 20 controls Speech Pathology Australia Professional Standards (2020) · 20 controls Sweden MCFFS 2026:12 Security Audit and Security Scanning Regulations · 20 controls TCFD Recommendations · 20 controls Telecommunications Sector Security Reforms (TSSR) · 20 controls UK Concordat on Open Research Data (UKRI) · 20 controls Ahpra Guidelines for Advertising a Regulated Health Service (December 2020) · 19 controls Australia NDIS Complaints Management and Resolution Rules 2018 · 19 controls Australian Education Act 2013 (Australia) · 19 controls Colorado AI Act (SB 24-205) · 19 controls Colorado Artificial Intelligence Act (proposed SB 24-205) · 19 controls EU Anti-Money Laundering Directive (Directive (EU) 2024/1640) · 19 controls EU CSDDD (Directive (EU) 2024/1760) · 19 controls EU Data Governance Act (DGA) · 19 controls EU Payment Services Directive (PSD2) · 19 controls FAA Cybersecurity Framework for Aviation · 19 controls ISO/IEC 27035-1:2023 · 19 controls ISO/IEC 27042:2015 · 19 controls NSW Child Safe Scheme (Children's Guardian Act 2019 Part 3A) · 19 controls Qatar DPL · 19 controls SOX 404 / ICFR · 19 controls Tasmania Child and Youth Safe Organisations Act 2023 · 19 controls Texas Data Privacy Act · 19 controls Texas TDPSA · 19 controls Turkey Zoning Law No. 3194 (Imar Kanunu) · 19 controls UK Land Registration Act 2002 · 19 controls US Americans with Disabilities Act (ADA) - Title III Digital Accessibility · 19 controls US Maritime Transportation Security Act (MTSA) and USCG Cybersecurity Requirements · 19 controls Ukraine Law on Personal Data Protection (Law No. 2297-VI) · 19 controls Uzbekistan Law on Personal Data (No. ZRU-547) · 19 controls Vietnam Law on Cybersecurity (No. 24/2018/QH14) · 19 controls AASB 121 The Effects of Changes in Foreign Exchange Rates · 18 controls AS 7472:2018 Railway Operations - Management of Change · 18 controls Armenia Law on Protection of Personal Data (2015) · 18 controls Australia Disability Discrimination Act 1992 · 18 controls Australia Food Standards Code Standard 1.2.7 Nutrition, Health and Related Claims · 18 controls Australia Scams Prevention Framework (Competition and Consumer Act 2010 Part IVF) · 18 controls Australia eSafety Commissioner - Online Safety Expectations for Industry · 18 controls Commercial National Security Algorithm Suite (CNSA) 2.0 · 18 controls Defence Industry Security Program (DISP) · 18 controls EU Cyber Solidarity Act (Regulation (EU) 2025/38) · 18 controls EU Product Liability Directive (Directive (EU) 2024/2853) · 18 controls EU SFDR (Sustainable Finance Disclosure Regulation) · 18 controls ISO 22316 · 18 controls ISO/IEC 27014:2020 · 18 controls NAIC Unfair Claims Settlement Practices Model Act (MDL-900) and Model Regulation (MDL-902) · 18 controls NFPA 70 National Electrical Code 2023 Article 701 Legally Required Standby Systems · 18 controls NSA CNSA Suite 2.0 — Commercial National Security Algorithm Suite · 18 controls PTES · 18 controls RFC 2350 - Expectations for Computer Security Incident Response (BCP 21) · 18 controls Turkey KVKK · 18 controls UK Age Appropriate Design Code (Children's Code) · 18 controls UK Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 (CQC Fundamental Standards) · 18 controls ASHRAE 90.1-2022 (Energy Standard for Sites and Buildings Except Low-Rise Residential Buildings) · 17 controls Annex 11 to EU GMP - Computerised Systems · 17 controls Australia NDIS Quality and Safeguarding Framework 2016 · 17 controls Australia Physiotherapy Board Registration Standards 2016 · 17 controls Basel Core Principles for Effective Banking Supervision (2024) · 17 controls CCSDS 350.0-G-3 - Space Communications Security (Consultative Committee for Space Data Systems) · 17 controls CMMC 2.0 Level 1 · 17 controls COPPA · 17 controls COSO Internal Control - Integrated Framework (2013) · 17 controls EU Network Code on Cybersecurity for the Electricity Sector · 17 controls EU Seveso III Directive (Directive 2012/18/EU) · 17 controls IRM Enterprise Risk Management Framework (Institute of Risk Management) · 17 controls IRM/AIRMIC/ALARM A Risk Management Standard (2002) · 17 controls Jamaica Data Protection Act 2020 · 17 controls NSW Workplace Surveillance Act 2005 · 17 controls Queensland Valuers Registration Act 1992 · 17 controls Regional Comprehensive Economic Partnership (RCEP) - E-Commerce Chapter · 17 controls Sigstore - Software Artifact Signing and Verification · 17 controls Taxation Administration Act 1953 (Cth) · 17 controls Tennessee IPA · 17 controls Tennessee Information Protection Act (TIPA) · 17 controls Tonga Privacy Act 2025 · 17 controls US Children's Online Privacy Protection Act (COPPA) and COPPA 2.0 Proposed Updates · 17 controls US Foreign Corrupt Practices Act (FCPA) · 17 controls Australia Occupational Therapy Board Registration Standards 2019 · 16 controls Australia Standards for VET Accredited Courses 2021 · 16 controls CISA ICS-CERT Advisories and Industrial Control Systems Security Guidelines · 16 controls Cambodia Sub-Decree on Personal Data Protection (Sub-Decree No. 134) · 16 controls DORA ITS on Register of Information Templates (Commission Implementing Regulation (EU) 2024/2956) · 16 controls DORA RTS on Classification of ICT-related Incidents (Commission Delegated Regulation (EU) 2024/1772) · 16 controls DORA RTS on Threat-Led Penetration Testing (Commission Delegated Regulation (EU) 2025/1190) · 16 controls EU Taxonomy Regulation · 16 controls EU Taxonomy Regulation (Regulation 2020/852) · 16 controls EU Taxonomy for Sustainable Activities (Regulation 2020/852) · 16 controls European Accessibility Act (Directive (EU) 2019/882) · 16 controls FIDO2 and W3C WebAuthn Standard · 16 controls Full Range Leadership Model (Bass & Avolio) · 16 controls Germany Accessibility Strengthening Act (BFSG) · 16 controls ISO 10007:2017 · 16 controls ISO/IEC 25012:2008 - Data Quality Model · 16 controls Philippines Cybercrime Prevention Act (RA 10175) · 16 controls Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA) · 16 controls UK Open Banking Standard · 16 controls US EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements · 16 controls US Internal Revenue Code Section 3402 Income Tax Withholding at Source (26 USC 3402) · 16 controls US SEC Digital Assets and Crypto Regulatory Framework · 16 controls US SEC Regulation Best Interest (17 CFR 240.15l-1) · 16 controls USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement) · 16 controls Australia Food Standards Code Standard 1.2.1 Requirements to Have Labels or Otherwise Provide Information · 15 controls Australia Food Standards Code Standard 3.2.3 Food Premises and Equipment · 15 controls Australia Health Insurance (Accredited Pathology Laboratories, Approval) Amendment (Relevant Standards) Principles (No. 3) 2026 · 15 controls Australia PGPA Finance Minister Delegations to Accountable Authorities and the Finance Secretary · 15 controls Australia Social Security Act 1991 (Age Pension: qualification, income test and assets test) · 15 controls CSA STAR (Security, Trust, Assurance, and Risk) · 15 controls EIOPA Guidelines on Outsourcing to Cloud Service Providers (EIOPA-BoS-20-002) · 15 controls EU ePrivacy Directive (2002/58/EC) · 15 controls Extractive Industries Transparency Initiative (EITI) Standard (2023) · 15 controls FERPA · 15 controls Family Educational Rights and Privacy Act (FERPA) · 15 controls ISO 27019 · 15 controls ISO/IEC 25059:2023 - Quality model for AI systems · 15 controls Italy Accessibility Requirements of Products and Services Decree (Legislative Decree No. 82/2022) · 15 controls PEGI - Pan European Game Information Age Rating System · 15 controls Privacy and Other Legislation Amendment Act 2024 (Australia) · 15 controls Real Estate Settlement Procedures Act (RESPA) · 15 controls US Form I-9 Employment Eligibility Verification (8 USC 1324a and 8 CFR Part 274a) · 15 controls ASIC Regulatory Guide 209 Credit Licensing: Responsible Lending Conduct (Australia) · 14 controls Australia Disability Standards for Education 2005 · 14 controls Australia Health Insurance (Accredited Pathology Laboratories, Approval) Principles 2017 · 14 controls Australia Insurance Act 1973 (Cth) · 14 controls Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018) · 14 controls China Data Security Law (DSL) · 14 controls DORA RTS on ICT Third-Party Contractual Policy (Commission Delegated Regulation (EU) 2024/1773) · 14 controls EU Web Accessibility Directive (Directive 2016/2102) · 14 controls GHG Protocol · 14 controls IACS Recommendation No. 194 - Cybersecurity Controls for Existing Ships · 14 controls IEEE 1686 · 14 controls NSW Environmental Planning and Assessment (Development Certification and Fire Safety) Regulation 2021 · 14 controls OWASP ASVS · 14 controls Pennsylvania Wiretapping and Electronic Surveillance Control Act (18 Pa.C.S. Chapter 57) · 14 controls Portugal Accessibility Requirements of Products and Services Decree-Law (Decree-Law No. 82/2022) · 14 controls SASB Standards · 14 controls SASB Standards (ISSB Integrated) · 14 controls SEC Cybersecurity Disclosure Rule · 14 controls SEC Cybersecurity Disclosure Rules · 14 controls Speech Pathology Australia Code of Ethics (2020) · 14 controls Strata Schemes Management Act 2015 (New South Wales) · 14 controls Student Privacy Pledge 2020 · 14 controls UK Investigatory Powers (Interception by Businesses etc. for Monitoring and Record-keeping Purposes) Regulations 2018 · 14 controls US Consumer Product Safety Commission (CPSC) - Connected Product Safety · 14 controls VUCA Leadership Framework · 14 controls Australia NDIS Worker Screening Rules 2018 · 13 controls Australia National Boards Common Registration Standards 2026 · 13 controls Australian Privacy Principles (APPs) · 13 controls EU Delegated Regulation (EU) 2022/30 (Radio Equipment Cybersecurity) · 13 controls FCC Customer Proprietary Network Information (CPNI) and Data Breach Rules (47 CFR 64.2001-2011) · 13 controls FDA 21 CFR Part 11 · 13 controls FDA Quality Management System Regulation (QMSR) · 13 controls Financial Services and Markets Act 2000 (UK) · 13 controls Florida Security of Communications Act (Fla. Stat. Chapter 934) · 13 controls GS1 Global Standards - Supply Chain Traceability and Data Security · 13 controls Hong Kong Personal Data (Privacy) Ordinance (PDPO, Cap 486) · 13 controls ICC Incoterms 2020 - International Commercial Terms · 13 controls ISO 22002-1:2025 Prerequisite programmes on food safety, Part 1: Food manufacturing · 13 controls ISO/IEC 27036-1:2021 · 13 controls ITU-T X.805 - Security Architecture for End-to-End Communications · 13 controls Illinois Eavesdropping Act (720 ILCS 5 Article 14) · 13 controls Kotter 8-Step Change Model · 13 controls Luxembourg Law of 1 August 2018 on Data Protection (GDPR Implementation) · 13 controls NSW Conveyancing (Sale of Land) Regulation 2022 · 13 controls New York Rules of Professional Conduct Rule 1.15 Attorney Trust Accounts (22 NYCRR Part 1200) · 13 controls OECD Recommendation on Artificial Intelligence (2024 Update) · 13 controls Queensland Working with Children Check Act 2000 · 13 controls Reserve Bank of Fiji Guideline 4 - Protection of Consumer Data and Privacy (2024) · 13 controls US ADA Title II - Web and Mobile App Accessibility Rule (28 CFR Part 35 Subpart H) · 13 controls AASB 1039 Concise Financial Reports · 12 controls ASIC Regulatory Guide 166 AFS Licensing: Financial Requirements (Australia) · 12 controls Australia Food Standards Code Standard 1.1.1 Structure of the Code and General Provisions · 12 controls Australia Policy for the Responsible Use of AI in Government (Version 2.0) · 12 controls Australia Spam Act 2003 · 12 controls C-TPAT - Customs-Trade Partnership Against Terrorism · 12 controls Customs-Trade Partnership Against Terrorism (C-TPAT) · 12 controls Equator Principles (EP4, 2020) · 12 controls FIRST CSIRT Services Framework and Standards · 12 controls GRI Standards · 12 controls Ghana Data Protection Act 2012 (Act 843) · 12 controls ICN Leadership for Change Programme · 12 controls Kuwait National Cybersecurity Framework · 12 controls Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) · 12 controls NASRHP Self-Regulating Health Profession Certifying Entity Membership Standards (Australia) · 12 controls New York Penal Law Article 250 (Offenses Against the Right to Privacy: Eavesdropping and Unlawful Surveillance) · 12 controls OECD Privacy Guidelines (2013) · 12 controls UK AI Regulation Framework · 12 controls US Automated Commercial Environment (ACE) - CBP Trade Data Requirements · 12 controls US Stored Communications Act (18 USC 2701-2713) · 12 controls Washington My Health My Data Act (MHMD) · 12 controls ACT Child Safe Standards (Human Rights Commission Act 2005 Part 5A) · 11 controls Australia NDIS Quality Support for Children Guidance 2024 · 11 controls BCBS 239 · 11 controls DFARS 252.204-7012 - Safeguarding Covered Defense Information · 11 controls FINRA Rule 2111 Suitability (United States) · 11 controls FTC Health Breach Notification Rule · 11 controls Finland Data Protection Act (Tietosuojalaki, 1050/2018) · 11 controls Georgia Law on Personal Data Protection (2012) · 11 controls German Supply Chain Due Diligence Act (LkSG) · 11 controls IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1) · 11 controls Laos Law on Prevention and Combating Cybercrime (2015) · 11 controls Lloyd's Minimum Standards - Cyber Security · 11 controls Turkey Cybersecurity Law (Law No. 7545) · 11 controls UK Modern Slavery Act 2015 · 11 controls US Electronic Communications Privacy Act Title I (Wiretap Act, 18 USC 2510-2523) · 11 controls AASB 1054 Australian Additional Disclosures · 10 controls Australia Food Standards Australia New Zealand Act 1991 (Cth) · 10 controls Australian Copyright Act 1968 (Australia), Educational Institution Provisions · 10 controls ECSS-E-ST-40C: Space Engineering - Software · 10 controls GLBA · 10 controls Hungary Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act) · 10 controls ISO/IEC/IEEE DIS 26517 · 10 controls Indonesia PDP Law · 10 controls New Hampshire Wiretapping and Eavesdropping Act (RSA 570-A) · 10 controls OWASP Top 10:2025 · 10 controls Romania Law No. 190/2018 on Data Protection Measures (GDPR Implementation) · 10 controls United States CAN-SPAM Act of 2003 and FTC CAN-SPAM Rule (16 CFR Part 316) · 10 controls Utah Consumer Privacy Act · 10 controls Utah Consumer Privacy Act (UCPA) · 10 controls Australia Food Standards Code Standard 1.2.3 Warning Statements, Advisory Statements and Declarations · 9 controls Consumer Data Right (CDR) Framework (Australia) · 9 controls Ethical Trading Initiative (ETI) Base Code · 9 controls Freedom of Information Act 1982 (Australia) · 9 controls ISO 22002-2:2025 Prerequisite programmes on food safety, Part 2: Catering · 9 controls Maryland Wiretap Act (Courts and Judicial Proceedings 10-402) · 9 controls Massachusetts Wiretap Act (M.G.L. c. 272 s. 99) · 9 controls NSW Surveillance Devices Act 2007 · 9 controls Ontario Employment Standards Act 2000 Part XI.1 (Written Policy on Electronic Monitoring) · 9 controls Own Risk and Solvency Assessment (ORSA) - NAIC Model Act · 9 controls PIC/S Guide to Good Manufacturing Practice for Medicinal Products · 9 controls Australia AI Ethics Framework · 8 controls Australia Food Standards Code Standard 3.2.1 Food Safety Programs · 8 controls Australia Heavy Vehicle National Law Fatigue Management · 8 controls Australia NDIS Code of Conduct Rules 2018 · 8 controls California Public Records Act (CPRA) · 8 controls Côte d'Ivoire Law on Personal Data Protection (Law No. 2013-450) · 8 controls DORA ITS on Major Incident Reporting Templates (Commission Implementing Regulation (EU) 2025/302) · 8 controls DORA RTS on ICT Subcontracting (Commission Delegated Regulation (EU) 2025/532) · 8 controls DORA RTS on Major Incident Notifications and Reports (Commission Delegated Regulation (EU) 2025/301) · 8 controls Delaware Online Privacy and Protection Act (proposed) · 8 controls Delaware Wiretapping and Electronic Surveillance Act (11 Del. C. Chapter 24 Subchapter I) · 8 controls HIPAA Breach Notification Rule · 8 controls HKMA TM-G-1 · 8 controls ILO Declaration on Fundamental Principles and Rights at Work (Core Conventions) · 8 controls ILO Tripartite Declaration of Principles concerning Multinational Enterprises (MNE Declaration) · 8 controls IRS Publication 1075 · 8 controls IRS Publication 1075 - Tax Information Security Guidelines · 8 controls ISMAP (Japan) · 8 controls ISO 22002-7:2025 Prerequisite programmes on food safety, Part 7: Retail and wholesale · 8 controls ISO/IEC 17050-1:2004 · 8 controls ISO/IEC 18033-7:2022 · 8 controls Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) · 8 controls Illinois Biometric Information Privacy Act (BIPA) · 8 controls India CERT-In Cyber Security Directions 2022 · 8 controls India DPDP Act · 8 controls Iowa Consumer Data Protection Act · 8 controls Kazakhstan Law on Personal Data and Their Protection (No. 94-V) · 8 controls Kentucky Consumer Data Protection Act · 8 controls Kenya DPA · 8 controls Kenya Data Protection Act · 8 controls Kenya Data Protection Act 2019 · 8 controls Kids Online Safety Act (KOSA) · 8 controls Law No. 2013-450 of 19 June 2013 on the Protection of Personal Data · 8 controls Law on Personal Data Protection (Official Gazette No. 42/2020) · 8 controls Liechtenstein DPA · 8 controls Lithuania Law on Legal Protection of Personal Data (2018) · 8 controls MARS-E - Minimum Acceptable Risk Standards for Exchanges · 8 controls MITRE ATT&CK · 8 controls MITRE D3FEND · 8 controls Maryland Online Data Privacy Act · 8 controls Maryland Online Data Privacy Act of 2024 · 8 controls MiFID II / MiFIR · 8 controls Michigan Eavesdropping Act (MCL 750.539a to 750.539j) · 8 controls Myanmar Cybersecurity Law (2023) · 8 controls NATO Cyber Defence Policy and NATO Computer Incident Response Capability (NCIRC) · 8 controls NHS Healthcare Leadership Model · 8 controls NIST AI 600-1: Generative AI Profile · 8 controls NIST Post-Quantum Cryptography Standards (FIPS 203, 204, 205) · 8 controls NIST Privacy Framework 1.0 · 8 controls NIST SP 800-115 · 8 controls NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment) · 8 controls NIST SP 800-122 · 8 controls NIST SP 800-123 · 8 controls NIST SP 800-137 · 8 controls NIST SP 800-144 · 8 controls NIST SP 800-145 · 8 controls NIST SP 800-146 · 8 controls NIST SP 800-30 · 8 controls NIST SP 800-37 · 8 controls NIST SP 800-39 · 8 controls NIST SP 800-63 Digital Identity Guidelines · 8 controls NIST SP 800-63-4 · 8 controls NIST SP 800-66 · 8 controls NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security · 8 controls NIST SP 800-88 · 8 controls NIST SP 800-92 · 8 controls NIST Special Publication 800-34 Revision 1, Contingency Planning Guide for Federal Information Systems · 8 controls NRF Cybersecurity and Data Privacy Framework (National Retail Federation) · 8 controls Nebraska Data Privacy Act · 8 controls Nigeria Open Banking Regulatory Framework (CBN, 2023) · 8 controls Notifiable Data Breaches Scheme (Australia) · 8 controls O-RAN Alliance Security Specifications (O-RAN.WG11) · 8 controls O-RAN WG11 Security Specification · 8 controls OECD AI Principles · 8 controls OECD AI Principles (2024 Update) · 8 controls OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023 Update) · 8 controls OECD/G20 Principles of Corporate Governance · 8 controls OSFI B-13 · 8 controls OWASP API Security Top 10 - 2023 · 8 controls OWASP MASVS · 8 controls OWASP Top 10 for LLM Applications 2025 · 8 controls Oman National Cybersecurity Framework · 8 controls Oman Personal Data Protection Law (Royal Decree 6/2022) · 8 controls Ontario Accessibility for Ontarians with Disabilities Act (AODA) - IASR Web Standard · 8 controls Open Banking Security · 8 controls Oregon Consumer Privacy Act · 8 controls PCAOB AS 2201 - Audit of Internal Control Over Financial Reporting (ICFR) · 8 controls Pakistan Personal Data Protection Bill 2023 · 8 controls Panama Law on Personal Data Protection (Law No. 81 of 2019) · 8 controls Personal Data Act (personopplysningsloven) · 8 controls Poland Act on Personal Data Protection (Ustawa o ochronie danych osobowych, 2018) · 8 controls Privacy Act 1988 (Australia) · 8 controls Privacy Act 2020 · 8 controls Right to Disconnect (Australia) · 8 controls Telecommunications (Consumer Protection and Service Standards) Act 1999 (Australia) · 8 controls Texas Penal Code Section 16.02 (Unlawful Interception, Use or Disclosure of Wire, Oral or Electronic Communications) · 8 controls Australia Commonwealth Child Safe Framework (2020) · 7 controls EBA Guidelines on ICT and Security Risk Management (EBA/GL/2024/07) · 7 controls Germany Criminal Code (StGB) Sections 201 and 201a (Confidentiality of the Spoken Word and Intimate Privacy in Images) · 7 controls HL7 FHIR Security Framework · 7 controls Modern Slavery Act 2018 (Australia) · 7 controls Oregon Obtaining Contents of Communications (ORS 165.540) · 7 controls Privacy by Design (PbD) - Seven Foundational Principles · 7 controls Texas Capture or Use of Biometric Identifier Act (CUBI, Business and Commerce Code 503.001) · 7 controls Victoria Surveillance Devices Act 1999 · 7 controls Australia Food Standards Code Standard 1.2.4 Information Requirements Statement of Ingredients · 6 controls Australia Food Standards Code Standard 1.2.8 Nutrition Information Requirements · 6 controls Heavy Vehicle National Law Loading Requirements · 6 controls ICH Q10 - Pharmaceutical Quality System · 6 controls ISO/IEC 17050-2:2004 · 6 controls Nevada Interception of Communications and Private Conversations (NRS 200.610 to 200.690) · 6 controls New York Labor Law Sections 203-c and 203-d (Employee Privacy: Recording in Restrooms and Personal Identifying Information) · 6 controls OWASP DevSecOps Maturity Model (DSOMM) · 6 controls PAS 1192-5:2015 - Security-Minded Approach to BIM and Digital Built Environments · 6 controls Papua New Guinea National Cybersecurity Policy & Cybercrime Act (2016) · 6 controls Australia Food Standards Code Standard 3.3.1 Food Safety Programs for Food Service to Vulnerable Persons · 5 controls Competition and Consumer Amendment (Unfair Trading Practices) Act 2026 · 5 controls Connecticut General Statutes Section 31-48d (Electronic Monitoring of Employees) · 5 controls ISO 22002-4:2025 Prerequisite programmes on food safety, Part 4: Food packaging manufacturing · 5 controls OWASP SAMM · 5 controls PropTech Security Standards - Smart Building Cybersecurity · 5 controls US NRC 10 CFR 73.54 - Cyber Security for Nuclear Power Plants · 5 controls WCO Authorised Economic Operator (AEO) Framework · 5 controls Washington RCW Chapter 9.73 (Recording Private Communications and Conversations) · 5 controls Zambia Data Protection Act (2021) · 5 controls Australia Food Standards Code Standard 1.2.5 Information Requirements Date Marking of Food for Sale · 4 controls Australia Food Standards Code Standard 3.2.2A Food Safety Management Tools · 4 controls Australia Public Governance, Performance and Accountability Amendment (Defence Delivery Agency) Rules 2026 · 4 controls BS 65000:2014 - Guidance on Organizational Resilience · 4 controls California Labor Code Section 435 (Recording in Restrooms and Locker Rooms) · 4 controls California Penal Code Section 631 (Wiretapping) · 4 controls EPA EPCRA / SARA Title III (Emergency Planning and Community Right-to-Know) · 4 controls France Penal Code Article 226-1 (Invasion of Privacy by Capturing Words, Images or Location) · 4 controls ISO 22002-6:2025 Prerequisite programmes on food safety, Part 6: Feed and animal food production · 4 controls Queensland Invasion of Privacy Act 1971 · 4 controls SSDF (NIST) · 4 controls Australia Food Standards Code Standard 1.2.10 Information Requirements Characterising Ingredients and Components of Food · 3 controls Australia Food Standards Code Standard 1.2.2 Information Requirements Food Identification · 3 controls California IoT Security Law · 3 controls Delaware Code Title 19 Section 705 (Monitoring of Employee Communications) · 3 controls ISO 22002-5:2025 Prerequisite programmes on food safety, Part 5: Transport and storage · 3 controls ISO/IEC 23053:2022/FDAmd 1 · 3 controls New York Civil Rights Law Section 52-c (Electronic Monitoring Notice) · 3 controls UNCITRAL Model Law on Electronic Commerce (1996, updated 2005) · 3 controls California Penal Code Sections 632 and 632.7 (Recording Confidential Communications) · 2 controls Connecticut General Statutes Section 31-48b (Employer Electronic Surveillance Limits) · 2 controls Montana Privacy in Communications (Mont. Code Ann. 45-8-213) · 2 controls Australia Food Standards Code Standard 1.2.6 Information Requirements Directions for Use and Storage · 1 controls Connecticut General Statutes Section 52-570d (Recording Private Telephone Conversations) · 1 controls 3GPP Security ANSSI Cybersecurity Framework Argentina PDPA CAIQ (CSA)CNCF Cloud Native Security (Cloud Native Computing Foundation)Canada Artificial Intelligence and Data Act (AIDA)Chile DPL China AI Regulations Cook Islands Electronic Transactions Act & Privacy Provisions (2003)Cook Islands Electronic Transactions Act 2003 EU AI Liability Directive EU NIS2 Directive - Energy Sector Cybersecurity Requirements (Directive 2022/2555)EU PSD3 and Payment Services Regulation (Proposed)Fiji Data Protection Bill (2020)ICH E6(R2) Good Clinical Practice - Data Integrity and Electronic Systems ISO 22739:2024 - Blockchain and Distributed Ledger Technologies Vocabulary Iceland DPA Maslach Burnout Prevention Model NATO Cyber Defence Standards and NCIRC (NATO Computer Incident Response Capability)North Macedonia Law on Personal Data Protection (2020)Norway PDPA Sarbanes-Oxley Act (SOX)

Frequently Asked Questions

What is the Compliance Intelligence API?▾

A REST and MCP API providing programmatic access to 1,120 compliance frameworks, 51,079 controls, and 315K+ verified cross-framework control mappings. Query framework details, map controls between standards, run gap analyses, and get coverage reports.

Is there a free tier?▾

Yes. Anonymous access gives you 10 API calls per day with no signup required. Free accounts get 100 calls/month with an API key. Professional plans start at $149/month with 10,000 calls included.

Does it work with AI agents?▾

Yes. The API is available as an MCP (Model Context Protocol) server at api.theartofservice.com/mcp. Add it to Claude Desktop, Cursor, Windsurf, or any MCP client. AI agents can query compliance data directly.

What frameworks are available?▾

1,120 frameworks including ISO 27001, SOC 2, NIST CSF, GDPR, HIPAA, PCI DSS, CMMC, NIS2, DORA, EU AI Act, and hundreds more. Each framework includes controls, domains, and cross-framework mappings.

Start building with the Compliance API

No signup required for 10 free API calls per day. Create a free account for 100 calls/month.

Create Free Account