This article explains how Drata organizes policy-to-control mappings so you can confidently navigate your compliance requirements.
Policy | Controls | Policy Controls | Frameworks |
Acceptable Use Policy | DCF-37 | DCF-1, DCF-32, DCF-37, DCF-40, DCF-43, DCF-50, DCF-51, DCF-106, DCF-558, DCF-763, DCF-780 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, Drata Essentials, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
AI Governance Policy | DCF-800 | DCF-800, DCF-802, DCF-803, DCF-804, DCF-805, DCF-809, DCF-810, DCF-878 | NIST AI RMF, ISO 42001:2023 |
AI Risk Management Policy | DCF-801 | DCF-801, DCF-802, DCF-804, DCF-813, DCF-877 | NIST AI RMF, ISO 42001:2023 |
AI System Development and Evaluation Policy | DCF-806 | DCF-805, DCF-806, DCF-811, DCF-812, DCF-879 | NIST AI RMF, ISO 42001:2023 |
Artificial Intelligence Management System (AIMS) Plan |
| DCF-161.AI, DCF-162.AI, DCF-164.AI, DCF-170.AI, DCF-176.AI, DCF-178.AI, DCF-184.AI, DCF-566.AI, DCF-800, DCF-801, DCF-802, DCF-803, DCF-804, DCF-805, DCF-806, DCF-809, DCF-810, DCF-811, DCF-812, DCF-813, DCF-877, DCF-878, DCF-879 | ISO 42001:2023 |
Asset Management Policy | DCF-182 | DCF-1, DCF-12, DCF-20, DCF-21, DCF-32, DCF-50, DCF-51, DCF-87, DCF-149, DCF-182, DCF-229, DCF-240, DCF-244, DCF-267, DCF-385, DCF-574, DCF-606, DCF-621, DCF-622, DCF-671, DCF-743, DCF-777, DCF-785, DCF-788, DCF-818, DCF-819, DCF-821, DCF-885, DCF-886, DCF-887, DCF-888, DCF-889, DCF-890, DCF-891, DCF-892, DCF-893, DCF-920, DCF-923, DCF-924 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, Drata Essentials, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Backup Policy | DCF-169 | DCF-27, DCF-32, DCF-77, DCF-78, DCF-98, DCF-99, DCF-100, DCF-169 | CCM, CCPA, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, Drata Essentials, CIS 8.1, Cyber Essentials v3.2, FedRAMP 20x, NIST SP 800-171 Rev. 2 |
Breach Notification Policy | DCF-193 | DCF-193 | HIPAA |
Business Associate Policy | DCF-195 | DCF-195 | HIPAA |
Business Continuity Plan | DCF-166 | DCF-166, DCF-167, DCF-26, DCF-32, DCF-602, DCF-603, DCF-684, DCF-833 | CCM, CCPA, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, CIS 8.1, Cyber Essentials v3.2, FedRAMP 20x |
Change Management Policy | DCF-567, DCF-305 | DCF-4, DCF-5, DCF-6, DCF-7, DCF-76, DCF-104, DCF-155, DCF-156, DCF-187, DCF-304, DCF-305, DCF-567, DCF-598, DCF-601, DCF-814, DCF-925, DCF-935, DCF-939, DCF-941 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Code of Conduct | DCF-44 | DCF-32, DCF-40, DCF-44, DCF-105, DCF-627 | CCM, CCPA, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, SOC 2, SOX ITGC, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Data Classification Policy | DCF-102 | DCF-32, DCF-102, DCF-186, DCF-384, DCF-528, DCF-569, DCF-797, DCF-840 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Data Protection Policy | DCF-45 | DCF-1, DCF-3, DCF-32, DCF-45, DCF-52, DCF-54, DCF-55, DCF-58, DCF-60, DCF-61, DCF-78, DCF-80, DCF-81, DCF-93, DCF-107, DCF-108, DCF-109, DCF-123, DCF-149, DCF-150, DCF-174, DCF-177, DCF-180, DCF-186, DCF-189, DCF-197, DCF-289, DCF-381, DCF-385, DCF-386, DCF-388, DCF-527, DCF-528, DCF-536, DCF-539, DCF-569, DCF-590, DCF-592, DCF-594, DCF-595, DCF-596, DCF-597, DCF-647, DCF-775 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, Drata Essentials, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Data Retention Policy | DCF-123, DCF-101 | DCF-32, DCF-101, DCF-103, DCF-107, DCF-109, DCF-123, DCF-253, DCF-390, DCF-391, DCF-782, DCF-797 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Disaster Recovery Plan | DCF-25 | DCF-25, DCF-26, DCF-27, DCF-32, DCF-602, DCF-603 | CCM, CCPA, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, Drata Essentials, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Encryption Policy | DCF-181 | DCF-32, DCF-53, DCF-54, DCF-55, DCF-93, DCF-181, DCF-231, DCF-273, DCF-278, DCF-284, DCF-609, DCF-645, DCF-680, DCF-779, DCF-792, DCF-912, DCF-936, DCF-937 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Incident Response Plan | DCF-159 | DCF-9, DCF-28, DCF-29, DCF-30, DCF-32, DCF-34, DCF-35, DCF-130, DCF-131, DCF-135, DCF-154, DCF-159, DCF-499, DCF-517, DCF-711, DCF-744, DCF-761, DCF-767, DCF-815, DCF-828, DCF-835, DCF-871, DCF-872 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, Drata Essentials, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Information Governance Policy | DCF-668 | DCF-170.AI, DCF-668, DCF-927 | CCM, DORA, HITRUST |
Information Security Management System (ISMS) and Privacy Information Management System (PIMS) Plan | DCF-184 | DCF-13, DCF-42, DCF-161, DCF-162, DCF-163, DCF-164, DCF-165, DCF-170, DCF-175, DCF-176, DCF-178, DCF-179, DCF-184, DCF-566, DCF-789 | ISO 27701:2019 |
Information Security Management System (ISMS) Plan 2022 | DCF-184 | DCF-1, DCF-13, DCF-34, DCF-35, DCF-42, DCF-80, DCF-81, DCF-82, DCF-83, DCF-84, DCF-89, DCF-113, DCF-114, DCF-129, DCF-142, DCF-151, DCF-153, DCF-161, DCF-162, DCF-163, DCF-164, DCF-165, DCF-170, DCF-172, DCF-175, DCF-176, DCF-178, DCF-179, DCF-184, DCF-535, DCF-566, DCF-568, DCF-789 | ISO 27001:2013, ISO 27001:2022, NIS 2 |
Information Security Policy | DCF-13 | DCF-1, DCF-9, DCF-13, DCF-32, DCF-33, DCF-34, DCF-36, DCF-39, DCF-42, DCF-46, DCF-47, DCF-105, DCF-160, DCF-170, DCF-171, DCF-173, DCF-174, DCF-179, DCF-190, DCF-191, DCF-503, DCF-516, DCF-528, DCF-570, DCF-681, DCF-685, DCF-742, DCF-745, DCF-746, DCF-826, DCF-827, DCF-837, DCF-914, DCF-915, DCF-916, DCF-921, DCF-922 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, Drata Essentials, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Internal Privacy Policy | DCF-794 | DCF-112, DCF-115, DCF-120, DCF-126, DCF-136, DCF-140, DCF-141, DCF-529, DCF-531, DCF-533, DCF-534, DCF-538, DCF-540, DCF-541, DCF-543, DCF-544, DCF-549, DCF-746, DCF-750, DCF-751, DCF-752, DCF-753, DCF-755, DCF-756, DCF-758, DCF-759, DCF-764, DCF-765, DCF-766, DCF-767, DCF-768, DCF-769, DCF-770, DCF-771, DCF-772, DCF-773, DCF-794 | ISO 27701:2019, HITRUST |
Logging and Monitoring Policy | DCF-741 | DCF-32, DCF-72, DCF-79, DCF-86, DCF-87, DCF-88, DCF-90, DCF-91, DCF-95, DCF-406, DCF-407, DCF-409, DCF-410, DCF-411, DCF-412, DCF-413, DCF-421, DCF-422, DCF-425, DCF-426, DCF-429, DCF-430, DCF-431, DCF-434, DCF-444, DCF-445, DCF-478, DCF-698, DCF-741, DCF-824, DCF-825, DCF-829, DCF-896, DCF-897, DCF-898, DCF-899, DCF-900, DCF-938 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Maintenance Management Policy | DCF-575 | DCF-575, DCF-614, DCF-615, DCF-616, DCF-617, DCF-618, DCF-619, DCF-799 | CMMC 2.0, DORA, FedRAMP, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST CSF 2.0, CIS 8.1, HITRUST |
Network Security Policy | DCF-678 | DCF-21, DCF-22, DCF-32, DCF-73, DCF-75, DCF-85, DCF-88, DCF-91, DCF-201, DCF-204, DCF-206, DCF-210, DCF-212, DCF-215, DCF-218, DCF-477, DCF-678, DCF-748, DCF-901, DCF-904, DCF-913, DCF-918, DCF-930 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Password Policy | DCF-68 | DCF-32, DCF-49, DCF-58, DCF-67, DCF-68, DCF-339, DCF-340, DCF-346, DCF-350, DCF-352, DCF-356, DCF-605, DCF-608, DCF-820 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, Drata Essentials, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
PCI DSS Compliance Policy | DCF-740 | DCF-32, DCF-204, DCF-206, DCF-215, DCF-216, DCF-218, DCF-220, DCF-223, DCF-225, DCF-231, DCF-233, DCF-239, DCF-240, DCF-241, DCF-244, DCF-249, DCF-255, DCF-257, DCF-258, DCF-259, DCF-260, DCF-261, DCF-262, DCF-263, DCF-264, DCF-265, DCF-268, DCF-269, DCF-270, DCF-271, DCF-272, DCF-273, DCF-276, DCF-278, DCF-280, DCF-281, DCF-282, DCF-284, DCF-285, DCF-288, DCF-289, DCF-292, DCF-297, DCF-310, DCF-312, DCF-324, DCF-343, DCF-348, DCF-349, DCF-354, DCF-358, DCF-360, DCF-366, DCF-368, DCF-388, DCF-397, DCF-404, DCF-406, DCF-407, DCF-408, DCF-409, DCF-410, DCF-411, DCF-412, DCF-413, DCF-414, DCF-421, DCF-422, DCF-423, DCF-424, DCF-429, DCF-430, DCF-431, DCF-434, DCF-435, DCF-437, DCF-438, DCF-441, DCF-448, DCF-452, DCF-454, DCF-455, DCF-456, DCF-458, DCF-461, DCF-463, DCF-464, DCF-465, DCF-467, DCF-469, DCF-470, DCF-473, DCF-479, DCF-482, DCF-493, DCF-496, DCF-499, DCF-504, DCF-509, DCF-510, DCF-516, DCF-517, DCF-519, DCF-521, DCF-523, DCF-524, DCF-525, DCF-681, DCF-682, DCF-683, DCF-685, DCF-686, DCF-689, DCF-690, DCF-698, DCF-699, DCF-700, DCF-701, DCF-702, DCF-703, DCF-704, DCF-705, DCF-706, DCF-707, DCF-708, DCF-709, DCF-710, DCF-711, DCF-713, DCF-715, DCF-718, DCF-719, DCF-720, DCF-721, DCF-722, DCF-723, DCF-724, DCF-727, DCF-728, DCF-729, DCF-730, DCF-731, DCF-732, DCF-733, DCF-734, DCF-735, DCF-736, DCF-737, DCF-738, DCF-739, DCF-740 | PCI DSS v4.0.1 |
Personal Data Management Policy | DCF-545 | DCF-117, DCF-545, DCF-551, DCF-554, DCF-555 | CCPA, GDPR, HITRUST |
Physical Security Policy | DCF-94 | DCF-108, DCF-109, DCF-147, DCF-32, DCF-363, DCF-364, DCF-365, DCF-366, DCF-367, DCF-368, DCF-369, DCF-372, DCF-374, DCF-375, DCF-377, DCF-378, DCF-379, DCF-380, DCF-381, DCF-382, DCF-571, DCF-572, DCF-573, DCF-625, DCF-655, DCF-749, DCF-816, DCF-836, DCF-917, DCF-94 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Privacy, Use, and Disclosure Policy | DCF-192 | DCF-192, DCF-196 | HIPAA |
Public Cloud PII Protection Policy | DCF-697 | DCF-121, DCF-125, DCF-128, DCF-283, DCF-383, DCF-386, DCF-530, DCF-691, DCF-692, DCF-693, DCF-694, DCF-695, DCF-696, DCF-697 | ISO/IEC 27018:2019, NIST AI RMF, HITRUST |
Risk Assessment Policy | DCF-15 | DCF-15, DCF-157, DCF-16, DCF-17, DCF-185, DCF-32, DCF-626, DCF-660, DCF-798, DCF-807, DCF-808, DCF-842, DCF-843, DCF-844, DCF-845, DCF-846, DCF-869, DCF-870, DCF-873, DCF-874, DCF-911 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Shared Responsibility Policy | DCF-669 | DCF-666, DCF-669 | CCM, ISO/IEC 27017:2015, ISO/IEC 27018:2019 |
Software Development Life Cycle Policy | DCF-31 | DCF-104, DCF-155, DCF-156, DCF-172, DCF-304, DCF-31, DCF-312, DCF-32, DCF-4, DCF-5, DCF-6, DCF-637, DCF-646, DCF-670, DCF-7, DCF-712, DCF-76, DCF-781, DCF-926 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, Drata Essentials, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
System Access Control Policy | DCF-10 | DCF-10, DCF-11, DCF-2, DCF-32, DCF-326, DCF-329, DCF-330, DCF-335, DCF-336, DCF-345, DCF-355, DCF-43, DCF-48, DCF-49, DCF-52, DCF-557, DCF-562, DCF-579, DCF-580, DCF-582, DCF-584, DCF-585, DCF-586, DCF-59, DCF-607, DCF-611, DCF-62, DCF-638, DCF-639, DCF-648, DCF-67, DCF-68, DCF-688, DCF-69, DCF-70, DCF-71, DCF-714, DCF-716, DCF-717, DCF-72, DCF-725, DCF-726, DCF-73, DCF-743, DCF-75, DCF-776, DCF-783, DCF-787, DCF-793, DCF-795, DCF-822, DCF-838, DCF-867, DCF-894, DCF-895, DCF-910, DCF-92 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, Drata Essentials, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
System and Information Integrity Policy | DCF-576 | DCF-576, DCF-644, DCF-649, DCF-650, DCF-651, DCF-652, DCF-653, DCF-654, DCF-655, DCF-656, DCF-672, DCF-687, DCF-823, DCF-839 | CMMC 2.0, DORA, FedRAMP, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST CSF 2.0, CIS 8.1, HITRUST |
System and Services Acquisition Policy | DCF-578 | DCF-578, DCF-792 | CMMC 2.0, DORA, FedRAMP, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3 |
System Security Planning Policy | DCF-577 | DCF-577, DCF-581, DCF-640, DCF-649, DCF-790 | CCM, CMMC 2.0, FedRAMP, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, HITRUST |
Vendor Management Policy | DCF-168 | DCF-32, DCF-56, DCF-57, DCF-127, DCF-128, DCF-129, DCF-132, DCF-133, DCF-134, DCF-168, DCF-507, DCF-537, DCF-632, DCF-762, DCF-847, DCF-849, DCF-868, DCF-905, DCF-919, DCF-943 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, Drata Essentials, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |
Vulnerability Management Policy | DCF-183 | DCF-18, DCF-19, DCF-23, DCF-24, DCF-32, DCF-50, DCF-152, DCF-183, DCF-188, DCF-291, DCF-293, DCF-294, DCF-296, DCF-297, DCF-456, DCF-465, DCF-522, DCF-677, DCF-687, DCF-784, DCF-817, DCF-875, DCF-902, DCF-903, DCF-940 | CCM, CCPA, CMMC 2.0, COBIT 2019, Cyber Essentials, DORA, FedRAMP, FFIEC, GDPR, HIPAA, ISO 27001:2013, ISO 27001:2022, ISO 27701:2019, ISO 42001:2023, Microsoft SSPA, NIS 2, NIST 800-53r5, NIST SP 800-171 Rev. 2, NIST SP 800-171 Rev. 3, NIST AI RMF, NIST CSF 1.1, NIST CSF 2.0, PCI DSS v3.2.1, PCI DSS v4.0.1, SOC 2, SOX ITGC, Drata Essentials, CIS 8.1, Cyber Essentials v3.2, HITRUST, FedRAMP 20x |