Framework Information
Understand the compliance frameworks supported within Drata
65 articles
Example Evidence for Not Monitored Controls (Essential Eight)
Frameworks
Framework Requirements
Marking Requirements In and Out of Scope
Framework Readiness
Level Picker for Frameworks with Tiered Requirements
ACSC Essential 8: A Requirement-Level Guide
ACSC Essential Eight: A Requirement-Level Guide
HITRUST e1/i1 Overview
NIS2 Update: What ENISA’s New Guidance Means for You!
ACSC Essential Eight Overview
ISO 27001:2013 Example ISMS Plan
ISO 27001:2022 Example ISMS Plan
ISO 27001:2022
Security Engineering Principles
Transition Guidance for ISO 27001:2013 to ISO 27001:2022
Question to ask a Potential ISO 27001 Certification Body (i.e. Auditor)
ISO 27001 Certification Review Template
ISO 27001 Background Check FAQs
Legacy | Example Evidence for Not Monitored Controls (ISO 27001)
Example Evidence for Not Monitored Controls (ISO 27001) - Revised (Following 5/7/2024 Updates)
SOC 2 Trust Services Categories Overview
SOC 2 Background Checks FAQs
Questions to ask a potential SOC 2 auditor
What to look for when reviewing your draft SOC 2 report
SOC 2 System Description
Reviewing Your Vendors' SOC 2 Reports Using Drata
SOC 2 Type 1 vs Type 2: Which Audit Type Should I Choose
SOC 2: All controls
Set SOC 2 Trust Service Criteria to Security Only
What Is a SOC 2 Bridge Letter? [+ Template]
Example Evidence for Not Monitored Controls (SOC 2)
Evidence for SOC 2 Compliance: Managed Platforms and Application Configurations