The Business Of Cybersecurity
The Business Of Cybersecurity
Home › Standards, Frameworks & Regulations
Most of compliance is shared across GRC frameworks. The 20% that's unique to you is where we excel.
80%
Shared foundation
20%
Your environment
The 80%: requirements are largely the same across all standards, frameworks, and regulations.
The 20%: what’s unique to you, planned and operated properly. This is where SimpliGRC excels.
Four groups, one control set: so evidence is captured once and reused everywhere
The services that put the standards, frameworks and regulations into practice
THE STANDARDS WE COVER
Each family below expands into the specific we assess, implement and certify against.
Risk-based cybersecurity grounded in U.S. federal guidance — pragmatic for any enterprise.
NIST CSF 2.0
Outcome-based cybersecurity organized around Govern, Identity, Protect, Detect, Respond and Recover
NIST RMF
A repeatable process to categorize, select, implement, assess, authorize and monitor controls
SP 800-S3 / 800-30
The federal control catalogue and risk-assessment guidance that underpin the RMF
Internationally certificate management systems for security, privacy, continuity and risk.
ISO/IEC 27001
Certifiable requirements for an information security management system
ISO/IEC 27701
Privacy extension to ISO 27001, aligned to GDPR and global privacy law
ISO/IEC 27005
Guidance for managing information security risk in support of ISO 27001
ISO/IEC 22301
Management system requirements for operational resilience and continuity
ISO 31000
Principles and guidelines for enterprise-wide risk management
Map your controls once, then satisfy the regulations and sector mandates you answer to.
DORA
ICT risk management and resilience testing for EU financial entities
GDPR
Data protection and privacy obligations for personal data in the EU
NERC CIP
Critical Infrastructure Protection standards for the bulk electric system
TSA
Cybersecurity directives for pipelines, rail and aviation operations
Frameworks overlap far more than they differ. We map your controls once and crosswalk them across every standard and regulation you're accountable for.
A single control assessment mapped to every framework you are accountable for: no duplicate questionnaires
Crosswalks between NIST, ISO and regulatory mandates eliminate redundant work and conflicting evidence
Evidence captured once is reused for every audit and cycle, keeping you audit-ready year-round
Start with a maturity assessment to the standards and regulations that apply to you.