ISO/IEC 27001:2022
ISO/IEC 27001:2022 Annex A with all 93 controls as a framework: applicability, implementation, evidence and the Statement of Applicability (SoA).
Annex A as a platform framework from the Starter planFRAMEWORKS
Frameworks and standards.
Centrally maintained frameworks for ISO/IEC 27001:2022, NIS2, DORA, NIST CSF 2.0 and NIST SP 800-53, plus Swiss frameworks: ICT baseline protection (Switzerland), the ICT Minimum Standard (Switzerland) with maturity levels, FINMA Circular 2023/1 and data security under the FADP – all linked through mappings. You add your own frameworks and internal requirements yourself.
NIST CSF 2.0
The Cybersecurity Framework of the US NIST with six functions, 22 categories and 106 subcategories.
Platform framework and coverage from the Pro planNIST SP 800-53
NIST’s complete control catalog: 1,014 controls and control enhancements in 20 families, with the baselines from SP 800-53B.
Platform framework from the Pro planNIS2
The obligations of entities under EU Directive 2022/2555: governance, cyber security risk management and reporting obligations.
Platform framework from the Pro planICT baseline protection (Switzerland)
The Confederation’s minimum requirements for every IT protection object: 64 requirements of directive Si001, version 5.1.
Platform framework from the Pro planICT Minimum Standard (Switzerland)
The 108 measures of the minimum standard for improving ICT resilience, with maturity levels 0–4 and evaluation as in the assessment tool.
Platform framework from the Pro planFINMA Circular 2023/1
The circular “Operational risks and resilience – banks”: 100 requirements from the margin numbers, with wording and implementation guidance.
Platform framework from the Pro planDORA
The obligations of financial entities under Regulation (EU) 2022/2554: ICT risk management, incidents, testing and ICT third-party risk.
Platform framework from the Pro planData security under the FADP
The data security rules of the Swiss Data Protection Ordinance: Art. 1–6 DPO as amended on 1 December 2025, 25 requirements in their wording.
Platform framework from the Pro plan, for organisations subject to the Swiss Federal Act on Data Protection
How close are you to ISO/IEC 27001?
In a personal demo, we show you the way to the readiness report, with no obligation. Or try it free for 30 days with every feature.