List of Mandates

We support the following mandates for report generation. The mandates are categorized by region or sector for your quick reference.

Mandates by Region

APRA Prudential Practice Guide (PPG): CPG 234 - Management of Security Risk in IT
Australian Signals Directorate - Essential Eight Maturity Model
European Union
General Data Protection Regulation (GDPR)

ANSSI 40 Essential Measures for a Healthy Network

IRDAI Guidelines On Information and Cyber Security for Insurers
Reserve Bank of India (RBI) - Baseline Cyber Security and Resilience Requirements (Annex 1)

New Zealand Information Security Manual (NZISM)

NERC Critical Infrastructure Protection (CIP)

NESA UAE Information Assurance Standards (IAS)

NCSC Basic Cyber Security Controls (BCSC)

2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy
CJIS Security Policy
Cybersecurity Maturity Model Certification (CMMC) Level 1
Cybersecurity Maturity Model Certification (CMMC) Level 2
Cybersecurity Maturity Model Certification (CMMC) Level 3
Cybersecurity Maturity Model Certification (CMMC) Level 4
Cybersecurity Maturity Model Certification (CMMC) Level 5
Federal Risk and Authorization Management Program (FedRAMP H) - High Security Baseline
Federal Risk and Authorization Management Program (FedRAMP L) - Low Security Baseline
Federal Risk and Authorization Management Program (FedRAMP LI-SaaS) - LI-SaaS Security Baseline
Federal Risk and Authorization Management Program (FedRAMP M) - Moderate Security Baseline
HIPAA Security Rule 45 CFR Parts 160/164, Subparts A/C:1996
IRS Publication 1075
Minimum Acceptable Risk Standards for Exchanges (MARS-E)
NIST 800-53 (Special Publication)
NIST Special Publication 800-171
Sarbanes-Oxley Act: IT Security
US Cybersecurity Maturity Model Certification (CMMC) 2.0 Level 2
The NIST Cybersecurity Framework (CSF)
US Cybersecurity Maturity Model Certification (CMMC) 2.0 Level 1

Mandates by Sector

2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy
ANSSI 40 Essential Measures for a Healthy Network
Australian Signals Directorate - Essential Eight Maturity Model
CIS Controls Version 8
General Data Protection Regulation (GDPR)
ISO/IEC 27001:2013
ISO/IEC 27001:2022
NCSC Basic Cyber Security Controls (BCSC)
NESA UAE Information Assurance Standards (IAS)
NIST 800-53 (Special Publication)
NIST Special Publication 800-171
The NIST Cybersecurity Framework (CSF)

Reserve Bank of India (RBI) - Baseline Cyber Security and Resilience Requirements (Annex 1)

Cloud Controls Matrix (CCM)

NERC Critical Infrastructure Protection (CIP)

APRA Prudential Practice Guide (PPG): CPG 234 - Management of Security Risk in IT
MAS - Notice 834: Cyber Hygiene Practices
SWIFT Customer Security Controls Framework - Customer Security Programme v2021
Technology Risk Management (TRM) Guidelines

Federal Risk and Authorization Management Program (FedRAMP H) - High Security Baseline
Federal Risk and Authorization Management Program (FedRAMP L) - Low Security Baseline
Federal Risk and Authorization Management Program (FedRAMP LI-SaaS) - LI-SaaS Security Baseline
Federal Risk and Authorization Management Program (FedRAMP M) - Moderate Security Baseline
IRS Publication 1075
New Zealand Information Security Manual (NZISM)

IRDAI Guidelines On Information and Cyber Security for Insurers

CJIS Security Policy

Sarbanes-Oxley Act: IT Security