Regulatory Standards
Every framework, one evidence layer.
Astragar GRC maps each requirement to controls, systems and evidence, then connects the gaps to vulnerabilities, sensitive data and financial exposure. Collect evidence once and reuse it across frameworks.
Data Protection & Privacy
Saudi Arabia
Saudi PDPL
Personal data protection
✓ In Astragar GRC
European Union · UK
GDPR
Personal data protection
Coming soon
United States
US State Privacy Laws
Consumer data privacy
✓ In Astragar GRC
Brazil
LGPD
Personal data protection
Coming soon
India
India DPDP
Personal data protection
Coming soon
Global
ISO 27701
Certifiable privacy management
Coming soon
United States
HIPAA
Healthcare
✓ In Astragar GRC
Global · Healthcare
HITRUST
Certifiable framework
✓ In Astragar GRC
Financial Services & Insurance
European Union
DORA
Financial services resilience
✓ In Astragar GRC
New York, US
NYDFS 500
Financial services & insurance
✓ In Astragar GRC
United States
OCC Controls
National banks
✓ In Astragar GRC
Global · Financial services
CRI Profile
Sector framework
✓ In Astragar GRC
United States
NAIC Model Law
Insurance
✓ In Astragar GRC
United States
SEC Cyber Rules
Public companies
Coming soon
Saudi Arabia
SAMA CSF
Banks, insurers & finance companies
Coming soon
Singapore
MAS TRM
Financial institutions
Coming soon
Australia
APRA CPS 234
APRA-regulated entities
Coming soon
Global
SWIFT CSCF
SWIFT users
Coming soon
Security Frameworks & Assurance
Global
SOC 2
Service organisation assurance
✓ In Astragar GRC
Global
ISO 27001
Certifiable ISMS
✓ In Astragar GRC
Global
NIST CSF 2.0
Risk framework
✓ In Astragar GRC
United States
NIST 800-53
Control catalogue
✓ In Astragar GRC
Global
PCI DSS
Payment card data
✓ In Astragar GRC
Global
CIS Controls
Prioritised safeguards
Coming soon
Global
SIG
Third-party risk
✓ In Astragar GRC
United Kingdom
Cyber Essentials
Baseline certification
Coming soon
Australia
Essential Eight
Mitigation strategies
Coming soon
Government, Critical Infrastructure & AI
European Union
NIS2
Essential & important entities
✓ In Astragar GRC
Saudi Arabia
NCA ECC
Government & critical infrastructure
Coming soon
European Union
EU CRA
Products with digital elements
Coming soon
United States
FedRAMP
Federal cloud
✓ In Astragar GRC
United States
CMMC
Defense industrial base
✓ In Astragar GRC
European Union
EU AI Act
AI systems
Coming soon
Global
ISO 42001
Certifiable AI management
Coming soon
Global
NIST AI RMF
AI governance
✓ In Astragar GRC
Don't see your framework?
We're adding frameworks continuously. Tell us what you report against.
Talk to us
