Choose a framework to begin a full readiness assessment across its core control domains. You'll get a scored gap analysis, a domain-by-domain breakdown, and a prioritized remediation plan.
AICPA Trust Services Criteria — Security (Common Criteria CC1–CC9).
ISO/IEC 27001:2022 Annex A controls — organizational, people, physical, and technological.
45 CFR Part 164 Subpart C — Administrative, Physical, and Technical Safeguards for ePHI.
AWS Shared Responsibility Model & CIS AWS Foundations Benchmark — 6 domains · 22 questions
Sarbanes-Oxley Act · IT General Controls · 6 domains · 22 questions
Gramm-Leach-Bliley Act · Safeguards Rule · 5 domains · 19 questions