ZEBRABYTE / FRAMEWORK LIBRARY
Different requirements. One coherent security programme.
Explore assurance standards, privacy regulations and AI governance. Start with what applies to your organisation, not with a list of certifications you do not need.
Common starting points
A structured way to explore compliance
Filter by area or search for a framework. Each page describes the scope, operating requirements and next steps, rather than promising instant certification.
No matching frameworks. Try another term or category.
SOC 2
Controls, evidence and audit readiness
Explore requirements
ISO/IEC 27001
ISMS and certification preparation
Explore requirementsGDPR
Privacy governance and technical measures
Explore requirements
NIS2
Cyber risk and incident readiness
Explore requirements
ISO/IEC 42001
Governance for AI systems: use cases, accountability, impacts, and risk management.
Explore requirements
DORA
Digital resilience for in-scope financial entities: ICT risk, incidents, testing, and third parties.
Explore requirements
ISO/IEC 27701
Privacy information management across roles, processing, controls, and personal data evidence.
Explore requirements
SOC 2 Type I
Examination of control design at a specified point in time.
Explore requirements SOC 2 Type II
Assessment of control design and operating effectiveness over an examination period.
Explore requirements
SOC 3
A general-use assurance report with reduced disclosure of details.
Explore requirements
CCPA / CPRA
California consumer privacy rights, where the organization falls within scope.
Explore requirements
HIPAA
Administrative, technical, and physical protections for regulated US health information.
Explore requirements
FERPA
Protection of US education records with access and disclosure requirements.
Explore requirements
Google CASA
Security assessment for certain OAuth applications in the Google ecosystem.
Explore requirements
CROSS-FRAMEWORK
A shared programme, not interchangeable requirements.
Evidence and controls can be reused when the mapping is justified. A SOC 2 report, an ISO certification and legal obligations are not equivalent outcomes.
See the compliance platformFrom scope to operating evidence
We assess applicability before designing controls and collecting evidence.
Determine jurisdiction, entity scope, contractual needs and existing maturity.
Assign owners, implement controls, run reviews and collect relevant evidence.
Address gaps and prepare for independent assurance or applicable supervisory checks.