Home Docs Standards and Compliance Standards and Compliance
owner Stefan Coetzee created 2026-05-12 updated 2026-05-12 not reviewed 1 min read
Vault note, not reviewed against the source. Written in the knowledge vault on 2026-05-12 by models working with Stefan Coetzee and published as it stands, with private addresses, e-mail addresses and an employer name redacted. Check claims against the primary source before relying on them.
Reference clusters from the knowledge vault, one per standard, regulation or framework. Each cluster page is the map of its notes: provenance, structure, controls or articles, comparisons and controversies, plus a dated position and a list of anchors to primary sources. The notes were written from public sources and model knowledge; no standards text was machine-processed for them.
Every page in this space is a vault note that has not been reviewed against the standard or regulation it describes. Use it as a map, and read the primary text before relying on a clause.
Clusters
Group Clusters Ai governance EU AI Act , ISO 42001 , NIST AI RMF , OECD AI Ai security OWASP LLM Top 10 Automotive cybersecurity ISO 21434 Automotive regulation UN R155 R156 Business continuity ISO 22301 Cloud security CSA CCM Cybersecurity frameworks NIST CSF Enterprise architecture TOGAF EU regulation Cyber Resilience Act , DORA , NIS2 It governance COBIT Payment security PCI DSS Privacy GDPR Process maturity CMMI Project management PRINCE2 Security compliance BSI IT-Grundschutz , FedRAMP CMMC , HITRUST , ISO 27001 , SOC 2 , TISAX Service management ITIL Supply chain security SLSA SBOM Threat intelligence MITRE
Recently updated in this space Child pages ISO 27001 Map of ISO/IEC 27001:2022 as the international standard for information security management systems (ISMS), and the wider ISO/IEC 27000 family. ISO 42001 Map of ISO/IEC 42001:2023 as the international standard for AI Management Systems (AIMS). ISO 21434 Map of ISO/SAE 21434:2021, Road vehicles cybersecurity engineering. ISO 22301 Map of ISO/IEC 22301:2019, Business Continuity Management Systems. NIS2 Map of Directive (EU) 2022/2555, the NIS2 Directive. DORA Map of Regulation (EU) 2022/2554, the Digital Operational Resilience Act. EU AI Act Map of Regulation (EU) 2024/1689, the EU AI Act. Cyber Resilience Act Map of Regulation (EU) 2024/2847, the Cyber Resilience Act. GDPR Map of Regulation (EU) 2016/679, the General Data Protection Regulation. SOC 2 Map of AICPA SOC 2 attestation framework. TISAX Map of TISAX (Trusted Information Security Assessment Exchange), the German-automotive-sector mechanism for information security assessment and result-sharing. BSI IT-Grundschutz Map of BSI IT-Grundschutz, German national InfoSec framework from BSI (Bundesamt für Sicherheit in der Informationstechnik). NIST CSF Map of NIST Cybersecurity Framework 2.0 (February 2024). NIST AI RMF Map of the NIST AI Risk Management Framework 1.0 (January 2023) and the Generative AI Profile (NIST AI 600-1, July 2024). OECD AI Map of OECD AI Principles. OWASP LLM Top 10 Map of the OWASP Top 10 for LLM Applications. MITRE Map of MITRE's adversary-and-defense knowledge bases: ATT&CK (adversary tactics, techniques, procedures), D3FEND (defensive countermeasures), ATLAS (adversarial AI threats). PCI DSS Map of PCI DSS v4.0 (March 2022, mandatory March 2025). HITRUST HITRUST Common Security Framework. FedRAMP CMMC Two US federal cybersecurity compliance programs. CSA CCM Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM). SLSA SBOM Software supply chain integrity. UN R155 R156 UN Regulations 155 and 156. ITIL Map of ITIL 4 (2019, with 2023 refresh) as the dominant IT service management framework. TOGAF Map of TOGAF (The Open Group Architecture Framework), Standard 10th Edition (2022), as the dominant enterprise architecture framework. COBIT Map of ISACA COBIT 2019, IT governance framework. CMMI Capability Maturity Model Integration. PRINCE2 Map of PRINCE2 (PRojects IN Controlled Environments). moc compliance From the knowledge vault, pillars/ . Built from scripts/docs by build_docs.py .