Back to Frameworks Hub
Interactive Compliance Scoping Tool

Framework Overlap — Visualiser

Which controls can you build once to satisfy multiple frameworks? Find out before you start.

Covers SOC 2, ISO 27001, DPDP Act, SEBI CSCRF, NIST CSF 2.0, FedRAMP, and ISO 42001. Updated May 2026.

Select Your Frameworks ↓
“Building for multiple frameworks without a control mapping plan wastes 40–60% of your compliance effort. Every duplicate policy, repeated risk assessment, and parallel evidence collection is avoidable time. This tool shows you where to build once.”

1. Choose Comparison Frameworks

Select 2 to 4 frameworks to generate your custom overlap heatmap.

SOC 2

Trust Services Criteria

AICPA CC1–CC9 Security, Confidentiality & Availability baseline.

ISO 27001:2022

Annex A Controls

93 controls across Organizational, People, Physical & Technological themes.

DPDP Act 2023

India Privacy Law

Obligations for Data Fiduciaries, Consent, and Data Principal Rights.

SEBI CSCRF 2024

Securities Cyber Resilience

Strict cyber risk management & incident reporting for Indian financial firms.

NIST CSF 2.0

Cybersecurity Framework

Govern, Identify, Protect, Detect, Respond, and Recover core functions.

FedRAMP Moderate

US Federal Compliance

Strict FIPS-aligned NIST SP 800-53 Rev 5 control catalog (325+ controls).

ISO 42001:2023

AI Management System

Annex A AI controls covering data quality, algorithmic bias & model risk.