Regulations & frameworks
Compliance that stands up to the regulator
Find the regime that applies to you and see how we help you meet it. Each name links to the official source.
| Regulation or framework | Region | What it covers | How we help |
|---|---|---|---|
| ISO/IEC 27001:2022 iso.org | Global | International standard for an information security management system. | Scoping, controls, internal audit and auditor liaison. |
| SOC 2 aicpa-cima.com | Global | AICPA attestation on security, availability and confidentiality controls for service organisations. | Readiness, control design, evidence collection. |
| PCI DSS pcisecuritystandards.org | Global | Security standard for organisations that handle payment card data. | Scope reduction, segmentation, testing and compliance support. |
| NIST Cybersecurity Framework nist.gov | Global | Voluntary framework to govern, identify, protect, detect, respond and recover. | Maturity assessment and roadmap. |
Descriptions are summaries to orient you, not legal advice. Links go to the publisher's page and may change. Check the current text and any amendments before relying on a requirement. NAPSECURE is an advisory firm and does not issue certifications or regulatory approvals.
Not sure which rules apply?
We will map your obligations and show the shortest path to evidence.