Standards
Manage multiple regulatory compliance frameworks
and standards in one platform
Centraleyes enables cyber risk teams to easily create and define frameworks to fit their specific needs, or choose from tens of pre-populated integrated risk and compliance frameworks. By mapping shared controls across frameworks, Centraleyes allows for a quicker, automated compliance process.
- Cyber Assessment Framework (CAF) Version 4.0Â
- Greek NIS2 Self-Assessment Tool
- OWASP AIMA
- Centraleyes AI Framework (CAIF)
- CRI Profile
- EASA Part-IS Explained: Scope, Requirements and Dates
- IATA Cyber Regulations
- Essential Eight
- NIST CSF 2.0 Critical
- CJIS v5.9.5
- OT Cybersecurity Framework: Requirements & Implementation
- Centraleyes Privacy Framework (CPF)
- AI Governance
- ISO 42001
- NIST AI RMF
- DORA EU
- ESG RiskÂ
- Business Email Compromise
- Health Industry Cybersecurity Practices (HICP)
- NIST 7621
- Secure Controls Framework (SCF)
- Cyber Resilience Review (CRR)
- ISO 27002
- OWASP SAMM
- Insider Threat Mitigation
- Ransomware Readiness Assessment
- FINRA
- OWASP MASVS
- NIST SP 800-82: ICS Security Requirements & Compliance
- NIST 800-207 (Zero Trust)
- HECVAT: Requirements and How to Achieve Compliance
- NIST SP 800-53 Rev. 5: Scope, Changes & Key Enhancements
- COSO Framework: Requirements and How to Achieve Compliance
- NIST SP 800-46: Telework and Remote Access Security
- COBIT 5: Requirements and How to Achieve Compliance
- ICDM: Israeli Cyber Defense Methodology Requirements
- OWASP ASVS: Application Security Verification Standard
- MITRE ATT&CK Framework: Uses, Benefits & How to Apply It
- ISO 27001: Requirements and How to Achieve Compliance
- CIS Controls: Requirements, Implementation Groups & Compliance
- Australian Privacy Act 1988 (Cth) with 2024 Amendments - Description
- LGPD (Brazil)
- Thailand's Personal Data Protection Act
- Qatar PDPPL (Law No. 13 of 2016): Compliance Guide
- South Korea Personal Information Privacy Act
- Nigerian Data Protection Act
- Turkey KVKK (Law No. 6698): Data Protection Law Guide
- Washington My Health My Data Act (MHMDA)
- Singapore Personal Data Protection Act (PDPA)
- Philippines Data Privacy Act of 2012
- South Korea AI Act
- APPI (Japan)
- PDPL (UAE)
- PDPL (Saudi)
- חוק ×”×’× ×ª הפרטיות
- India Digital Personal Data Protection Act (DPDP)
- What is the New Jersey Privacy Act?
- What is the IDPA?
- What is the Rhode Island Privacy and Security Act (RIDPA)?
- What is the MNDPA?
- Tennessee Information Protection Act
- Â Delaware Personal Data Privacy Act (DPDPA)
- Texas Data Privacy and Security Act (TDPSA)
- Oregon Consumer Privacy Act (OCPA)
- Nebraska Data Privacy Act (NDPA)
- Kentucky Consumer Data Protection Act (KCDPA)
- PIPEDA
- Utah Consumer Privacy Act (UCPA)Â
- Colorado Privacy Act (CPA)Â
- Montana Consumer Data Privacy Act (MCDPA): Requirements and 2025 Amendments
- VCDPA
- Personal Information Privacy Law (PIPL) of China
- Nevada Privacy Law
- POPIA
- GDPR (EU and UK): Principles, Rights and How to Comply
- NIST Privacy Framework: Requirements and How to Comply
- FERPA Compliance: Requirements and How to Achieve It
- NY SHIELD Act: Requirements and How to Comply
- ISO/IEC 27701: PIMS Requirements and How to Comply
- TISAX
- Oklahoma Data Privacy Act (OKDPA)
- Cyber Fundamentals (CyFun)
- Cyber Resilience Act (EU)
- ISO 9001
- LGPD (Brazil)
- Singapore AI FrameworkÂ
- South Korea Personal Information Privacy Act
- Nigerian Data Protection Act
- Singapore Personal Data Protection Act (PDPA)
- Philippines Data Privacy Act of 2012
- APPI (Japan)
- PDPL (UAE)
- PDPL (Saudi)
- Cyber Essentials Plus (v3.2 – Technical Testing Prep)
- EU AI ACT
- HECVAT 4.0
- Information Security Manual (ISM)
- What is the New Jersey Privacy Act?
- What is the IDPA?
- What is the Rhode Island Privacy and Security Act (RIDPA)?
- What is the MNDPA?
- Texas Data Privacy and Security Act (TDPSA)
- Oregon Consumer Privacy Act (OCPA)
- Nebraska Data Privacy Act (NDPA)
- SWIFT CSP 2026
- CJIS v5.9.5
- Florida Digital Bill of Rights (FDBR)
- Nevada Privacy Act
- Iowa Consumer Data Protection Act (ICDPA)
- ISO 42001
- NIS2
- HITECH Act
- What is the CPRA Act?
- IRS publication 1345
- ESG
- Cyber Essentials (UK)
- ISO 27002
- UAE IA
- Personal Information Privacy Law (PIPL) of China
- Recent Frameworks
FFIEC Compliance: Requirements and How to Achieve It
June 14, 2021
GDPR (EU and UK): Principles, Rights and How to Comply
June 14, 2021
NY SHIELD Act: Requirements and How to Comply
June 14, 2021
OWASP ASVS: Application Security Verification Standard
June 14, 2021
ISO 27001: Requirements and How to Achieve Compliance
June 14, 2021
ISO/IEC 27701: PIMS Requirements and How to Comply
June 14, 2021

8 Best AI Powered GRC Tools in 2026
October 6, 2026

6 Best Operational Risk Management Software Platforms in 2026
September 3, 2026
Cyber Assessment Framework (CAF) Version 4.0Â
August 31, 2026
All Standards | Security
HECVAT: Requirements and How to Achieve Compliance
What is HECVAT? The Higher Education Community Vendor Assessment Toolkit (HECVAT) is a risk assessment template that was created in 2016 specifically for higher education institutions to assess vendor risk.…
NIST SP 800-53 Rev. 5: Scope, Changes & Key Enhancements
What is NIST 800-53? NIST 800-53 is a comprehensive set of guidelines developed by the National Institute of Standards and Technology (NIST) aimed at helping organizations manage and protect their…
COSO Framework: Requirements and How to Achieve Compliance
What is the COSO Framework? The Committee of Sponsoring Organizations of the Treadway Commission (COSO), a voluntary private-sector initiative, was established in 1985 to improve business performance and governance through…
NIST SP 800-46: Telework and Remote Access Security
What is the NIST SP 800-46 framework? The US Commerce Department’s National Institute of Standards and Technology (NIST) is a non-regulatory body responsible for investigating and developing standards for all…
COBIT 5: Requirements and How to Achieve Compliance
What is COBIT 5? COBIT is an IT management framework created by ISACA (Information Systems Audit and Control Association), which helps organizations achieve their goals for governance and management of…
ICDM: Israeli Cyber Defense Methodology Requirements
What is the ICDM Framework? The Israeli Cyber Defense Methodology (ICDM), also known as The Corporate Defense Methodology is part of the National Defense Concept, which includes a variety of…
OWASP ASVS: Application Security Verification Standard
What is OWASP ASVS? The Application Security Verification Standard (ASVS) v5.0.0 is OWASP’s leading framework for defining and assessing the security of web applications and APIs. Version 5 introduces a…
MITRE ATT&CK Framework: Uses, Benefits & How to Apply It
What is the MITRE ATT&CK Framework? MITRE ATT&CK is a framework that organizes and categorizes the different approaches, strategies and procedures utilized by threat actors in the digital environment, assisting…
ISO 27001: Requirements and How to Achieve Compliance
What is ISO/IEC 27001? ISO/IEC 27001 is a member of the ISO 27000 family of standards. The ISO 27001 standard is internationally accepted as a specification for an Information Security…
CIS Controls: Requirements, Implementation Groups & Compliance
What are the CIS Controls? The CIS Critical Security Controls (CSC) are published by the Center for Internet Security (CIS) to assist organizations in better defending against well-known threats by…
CSA STAR: Requirements and How to Achieve Compliance
Updated November 2026: this article was written in 2021, when CCM v4 was new. CSA released CCM v4.1 and CAIQ v4.1 in January 2026; STAR accepts v4.0 and v4.1 submissions…
NIST CSF 2.0: Requirements and How to Achieve Compliance
What is NIST CSF 2.0? The NIST Cybersecurity Framework (CSF) has been used for years as a comprehensive guide for organizations looking to improve their information security and risk management.…