Trust, Automated.

Cyber Essentials helps companies guard against the most common cyber threats and demonstrate commitment to cyber security.

SOC 2 defines criteria for managing data based on: security, availability, processing integrity, confidentiality, and privacy.

ISO 27001 is an information security management system (ISMS) that helps keep consumer data safe.

HIPAA is a law requiring organizations that handle protected health information (PHI) to keep it protected and secure.

GDPR is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area.

PCI DSS is a set of controls to make sure companies that handle credit card information maintain a secure environment.

CCPA gives consumers control over the personal information that businesses collect and guidance on how to implement the law.

CMMC is a unified standard for implementing cybersecurity across the defense industrial base (DIB).

SSPA sets privacy and security requirements for Microsoft suppliers and drives compliance to these requirements.

National Institute of Standards and Technology’s framework for Improving Critical Infrastructure Cybersecurity (CSF).

NIST SP 800-53 is a catalog of controls for all U.S. federal information systems except those related to national security.

NIST SP 800-171 recommends requirements for protecting the confidentiality of controlled unclassified information (CUI).

ISO 27701 specifies requirements for establishing and continually improving a privacy information management system.

The FFIEC provides a set of technology standards for online banking that financial institutions must follow.

The Cloud Controls Matrix by Cloud Security Alliance (CSA) is a cybersecurity control framework for cloud computing.

ISO 27017 contains controls specifically in the area of cloud security.

ISO 27018 contains controls directed at cloud providers that process personal data.

Tailor Drata to your unique business needs with easy to build custom frameworks and custom controls.