SOC 2 AICPA Trust Services Criteria — Security (Common Criteria CC1–CC9).
9 domains 31 questions
ISO/IEC 27001:2022 ISO/IEC 27001:2022 Annex A controls — organizational, people, physical, and technological.
6 domains 23 questions
HIPAA Security Rule 45 CFR Part 164 Subpart C — Administrative, Physical, and Technical Safeguards for ePHI.
6 domains 21 questions
Cloud Security (AWS) AWS Shared Responsibility Model & CIS AWS Foundations Benchmark — 6 domains · 22 questions
6 domains 23 questions
SOX — Sarbanes-Oxley Act Sarbanes-Oxley Act · IT General Controls · 6 domains · 22 questions
6 domains 22 questions
GLBA — Gramm-Leach-Bliley Act Gramm-Leach-Bliley Act · Safeguards Rule · 5 domains · 19 questions
5 domains 19 questions
NIST CSF 2.0 Cybersecurity Framework · 6 functions · 22 questions
6 functions 22 questions