1,120 compliance frameworks

Browse all 1,120 compliance frameworks in our knowledge base, carrying 315K+ cross-framework control mappings between them. Each framework page includes an overview, key controls, related frameworks, and links to our interactive mapping tools.

Showing 30 of 1208 framework pages

21 CFR Part 211 - Current Good Manufacturing Practice

OtherUnited States

Title 21 Code of Federal Regulations Part 211 establishes the minimum current good manufacturing practice (cGMP) requirements for the preparation of drug products (finished pharmaceuticals) for administration to humans or animals. Covers all aspects of pharmaceutical manufacturing from personnel and facilities to production controls and record keeping.

76 controls20 domains

21 CFR Part 58 - Good Laboratory Practice (GLP)

OtherUnited States

Title 21 Code of Federal Regulations Part 58 establishes Good Laboratory Practice (GLP) regulations for nonclinical laboratory studies supporting applications for research or marketing permits for FDA-regulated products. Covers organization, facilities, equipment, testing operations, records, and reporting requirements to ensure the quality and integrity of safety data..

25 controls7 domains

3GPP Security

TelecommunicationsInternational

3GPP Telecommunications Security Specifications.

3GPP Security Architecture (TS 33.501, 5G Security)

TelecommunicationsInternational (3GPP)

3GPP TS 33.501 specifies the security architecture and procedures for 5G systems. It defines security features for authentication, key management, confidentiality, integrity protection, and network domain security in 5G networks.

43 controls22 domains

AASB 10 Consolidated Financial Statements

Financial ServicesAustralia

The Australian adoption of IFRS 10: when a parent must present consolidated statements and the Australian exemption rules, the three-element control model (power over relevant activities, exposure to variable returns, and the link between them, including principal and agent analysis), consolidation procedures, non-controlling interests, loss of control, the investment entity exception, and guidance for not-for-profit entities.

22 controls5 domains

AASB 101 Presentation of Financial Statements

Financial ServicesAustralia

AASB 101 Presentation of Financial Statements sets the minimum structure and general features of a complete set of general-purpose financial statements: fair presentation through compliance, going concern assessment, accrual accounting, materiality, no offsetting, comparatives, and the minimum content of the statement of financial position, the statement(s) of profit or loss and other comprehensive income, the statement of changes in equity and the notes, including capital management and estimation uncertainty disclosures. Superseded by AASB 18 from 1 January 2027.

26 controls5 domains

AASB 1039 Concise Financial Reports

Financial ServicesAustralia

The Australian standard for the concise financial report a company, scheme or disclosing entity may send members instead of the full financial report: everything derived from the audited report on the same policies, the four primary statements unchanged, discussion and analysis for unlisted entities, the specific disclosures (segments, revenue, dividends, earnings per share, currency, subsequent events, policy changes, first-time adoption, going concern), comparatives and the first-page advice that the full report is available free on request.

12 controls3 domains

AASB 1054 Australian Additional Disclosures

Financial ServicesAustralia

The Australian-only disclosures layered on IFRS: the explicit and unreserved compliance statement, the reporting framework and for-profit or not-for-profit status, general purpose versus special purpose statements and the disclosures special purpose statements must carry, auditor and network firm fees split between audit and other services, franking credits available, the direct-method operating cash flow reconciliation, and the disclosure about IFRS Standards the AASB has not yet issued, with the 2027 to 2029 AASB 2026-2 and 2026-4 changes noted on the affected leaves.

10 controls3 domains

AASB 107 Statement of Cash Flows

Financial ServicesAustralia

The Australian adoption of IAS 7: the duty to present a statement of cash flows, what counts as cash and cash equivalents, classification into operating, investing and financing activities, the direct and indirect methods, gross versus net reporting, foreign currency, interest, dividends and tax flows, business acquisitions and disposals, non-cash transactions, and the disclosures of financing liability movements, supplier finance arrangements, cash components and restricted balances, with the 2027 AASB 18 and 2028 AASB 2026-4 changes noted on the affected leaves.

22 controls5 domains

AASB 121 The Effects of Changes in Foreign Exchange Rates

Financial ServicesAustralia

The Australian adoption of IAS 21: determining functional currency, recording and remeasuring foreign currency transactions, recognising exchange differences including on net investments in foreign operations, translating into a presentation currency and from hyperinflationary currencies, disposal of foreign operations, currencies that are not exchangeable, and the related disclosures.

18 controls5 domains

AASB 18 Presentation and Disclosure in Financial Statements

Financial ServicesAustralia

The Australian adoption of IFRS 18, replacing AASB 101 from 2027: what a complete set of financial statements must contain, how to decide what goes on the face and what goes in the notes, the five profit or loss categories and the operating profit and profit before financing and income taxes subtotals, operating expenses by nature or function, the statement of financial position and changes in equity minimums, the notes structure, and the single-note disclosure and reconciliation of management-defined performance measures.

33 controls8 domains

AASB S2 Climate-related Disclosures

Risk ManagementAustralia

Australian Accounting Standards Board Standard S2 requires entities to disclose climate-related risks and opportunities. Based on IFRS S2 issued by the ISSB.

51 controls5 domains

ACCME Accreditation Requirements and Standards for Integrity and Independence in Accredited Continuing Education

Quality ManagementUnited States

The ACCME's accreditation requirements for US continuing medical education providers: the eight core criteria that tie activities to practice gaps and measured change, the Standards for Integrity and Independence that exclude ineligible companies, require 24-month disclosure, pre-role mitigation and learner disclosure, and control commercial support and marketing separation, and the policies on the accreditation statement, records and joint providership.

26 controls5 domains

ACSC Essential Eight

GovernmentAustralia

Australian Cyber Security Centre Essential Eight Maturity Model: eight prioritised mitigation strategies with three maturity levels..

152 controls8 domains

ACT Child Safe Standards (Human Rights Commission Act 2005 Part 5A)

OtherAustralia: Australian Capital Territory

The ACT Child Safe Standards Scheme (from 1 August 2024): every provider of a service for children and young people in the ACT must implement ten prescribed child safe standards that mirror the National Principles, overseen by the Children and Young People Commissioner, with a complaints route to the ACT Human Rights Commission.

11 controls2 domains

ACT Medicines, Poisons and Therapeutic Goods Act 2008

HealthcareAustralia

The ACT Medicines, Poisons and Therapeutic Goods Act 2008 (Republication No 29): authorisation to supply, prescribe, possess and administer scheduled medicines and poisons, rules on invalid prescriptions and reporting to the chief health officer, monitored medicines, loss and theft reporting, controlled medicine registers and pharmacy handovers, packaging, labelling and storage, advertising and vending limits, therapeutic goods supply, licences and executive officer liability.

29 controls8 domains

ACT Residential Tenancies Act 1997

OtherAustralia: Australian Capital Territory

ACT Residential Tenancies Act 1997 covers duties of ACT lessors, agents and tenancy database operators under the Residential Tenancies Act 1997, its Schedule 1 standard terms and the Residential Tenancies Regulation 1998: advertising, disclosure, minimum housing standards, bonds, rent increases, repairs, consents, access, termination grounds, family violence and databases.

53 controls12 domains

ACT Veterinary Practice Act 2018

OtherAustralian Capital Territory

The ACT's current veterinary regulation Act and its code of professional conduct: scope-of-practice and title-protection offences, registration renewal and residence duties, the full code of conduct (including the 4-year clinical record-keeping duty), and registered-premises duties.

35 controls4 domains

ACT Workplace Privacy Act 2011

PrivacyAustralia: Australian Capital Territory

Australian Capital Territory law on workplace surveillance of workers (employees, contractors, labour hire and volunteers): written notice 14 days ahead with its eight required items, good faith consultation, visible cameras and signs, a data surveillance policy, tracking notices, limits on blocking email and websites and on using records for adverse action, worker access to records, covert surveillance only with a court authority, prohibited non-work areas, and record security and destruction.

22 controls4 domains

AICPA Privacy Management Framework (PMF)

PrivacyUnited States (AICPA)

The AICPA Privacy Management Framework (PMF) provides a comprehensive framework for CPA practitioners and organisations to manage and report on privacy risk. It builds on the Generally Accepted Privacy Principles (GAPP) and SOC 2 Trust Services Criteria for Privacy.

26 controls9 domains

AICPA SOC 1

OtherUnited States

Service Organization Controls for financial reporting.

37 controls4 domains

AICPA SOC 3

OtherUnited States

Trust Services Criteria for general use reporting.

31 controls4 domains

AMIC Industry Animal Welfare Standard for Livestock Processing Establishments

OtherAustralia

The Australian Meat Industry Council's industry standard for the welfare of cattle, sheep, pigs, goats, buffalo, deer and horses at Australian processing establishments, from receival through to slaughter, at Edition 4 (approved November 2024, effective 1 January 2026): a welfare management system with audit, corrective action and management review; competent, named welfare personnel; fit infrastructure, lairage, emergency killing equipment and, new in this edition, video surveillance of the welfare-critical steps; receival scheduling and supplier feedback; low-stress handling with numeric falls, vocalisation and goad targets; water, feed, inspection and care of compromised animals; restraint, permitted stunning methods and effectiveness targets, bleedline insensibility, sticking and no dressing before death. Voluntary and certifiable under the AAWCS.

31 controls5 domains

AML/CTF Act 2006 (Australia)

OtherAustralia

The Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) establishes a regulatory framework requiring Australian businesses providing designated services to identify, mitigate and manage money laundering and terrorism financing risks. Administered by AUSTRAC..

67 controls9 domains

AML/CTF Rules 2025 (Australia)

Financial ServicesAustralia

The AUSTRAC rules that turn the AML/CTF Act's duties into specific steps: what an AML/CTF program must contain and who approves what, the minimum KYC for each customer type, when verification can be delayed and for how long, enhanced checks for PEPs and unusual requests, nested services and correspondent banking reviews, reliance and real estate KYC sharing arrangements, travel rule information for payments and virtual assets, report contents and deadlines, enrolment and registration, plus the transitional dates and class exemptions that apply during the tranche 2 rollout.

74 controls13 domains

ANSI/ASIS PAP.1-2012 Physical Asset Protection

OtherUnited States

ANSI/ASIS PAP.1-2012 Physical Asset Protection sets out how to run physical security as a management system: a top-management policy and accountable owner, documented context and scope, a security survey and risk assessment that drive countermeasure choice, layered protection in depth, designed and commissioned physical protection systems with a maintenance and replacement life cycle, emergency command and control, exercises, audit and review, and element guidance on CPTED, site hardening, lighting, barriers, intrusion detection, access control, video surveillance, alarm monitoring and security staffing.

74 controls4 domains

ANSI/ASIS WVPI AA-2020 Workplace Violence and Active Assailant

OtherUnited States, used internationally

ANSI/ASIS WVPI AA-2020 Workplace Violence and Active Assailant sets out how an organization prevents, intervenes in and responds to workplace violence: a scoped working definition, legal and labor obligations, top management and multidisciplinary roles, a needs assessment, a WVPI policy without zero-tolerance wording, a trained Threat Management Team with incident protocols, training and confidential records, warning signs and threat assessment, intimate partner violence, law enforcement liaison, immediate response and post-incident recovery, plus the informative active assailant annex (plan, kits, mass notification, staging areas, exercises, crisis communications, reunification, recovery phases).

82 controls9 domains

ANSSI Cybersecurity Framework

Information SecurityFrance

French National Cybersecurity Agency framework.

ANSSI Guide d'hygiene informatique (42 mesures, v2.0)

Information SecurityFrance

ANSSI Guide d'hygiene informatique, the French national cybersecurity agency baseline of 42 measures across 10 themes for strengthening the security of an information system.

42 controls10 domains

APEC Cross-Border Privacy Rules (CBPR) System

PrivacyAsia-Pacific (APEC)

The APEC Cross-Border Privacy Rules (CBPR) System is a voluntary accountability-based framework for facilitating cross-border data flows among APEC economies while protecting personal information. Participating companies self-certify compliance with programme requirements, verified by APEC-recognised accountability agents.

59 controls17 domains

Page 1 of 41

Compare Frameworks

See control overlap and gap analysis between any two frameworks. 315K+ verified control mappings.

Implementation Guides

Step-by-step guides for implementing ISO 27001, NIST CSF, SOC 2, GDPR, and more.

Compliance Glossary

200+ defined terms covering compliance, governance, risk management, and security.

Questions people ask

What compliance frameworks do you cover?

We cover 1,120 compliance frameworks including ISO 27001, SOC 2, NIST CSF 2.0, GDPR, HIPAA, PCI DSS 4.0, CMMC, CIS Controls v8, EU AI Act, and hundreds more across information security, privacy, financial services, healthcare, cloud security, AI governance, and government sectors.

How do I choose the right compliance framework?

The right framework depends on your industry, geography, customer requirements, and regulatory obligations. Start by identifying which frameworks your customers or regulators require. Our comparison tool lets you see control overlap between frameworks, helping you prioritize implementation and avoid duplicate effort.

Can I compare frameworks against each other?

Yes. Our framework comparison tool shows control-to-control mappings between any two frameworks. You can see overlap percentages, gap analysis, and specific control alignments. We have 315K+ verified cross-framework control mappings in our database.

Are these framework pages kept up to date?

Yes. Our framework pages are regularly updated to reflect the latest versions, controls, and regulatory changes. Each page shows a 'Last Updated' date so you know when the information was last verified.