Frameworks Available Now

Information security management system standard covering risk assessment, the Statement of Applicability, Annex A controls, internal audit and management review.

AI management system standard covering governance, impact assessment and the AI system life cycle.

Trust Services Criteria attestation programme covering the control environment, access management, change management, monitoring and vendor oversight. Security always applies, other categories as scoped.

Bank of Ghana directive covering governance, cyber risk management, technology operations, incident reporting and regulatory returns, applied proportionally to institution tier.

A compliance programme for the EU General Data Protection Regulation. GDPR is a regulation, not a certification.

A compliance programme for the EU Network and Information Security Directive. NIS2 is a directive transposed into national law, not a certification.

A compliance programme for the EU Digital Operational Resilience Act for financial entities and their critical ICT providers.

Quality management system standard covering context, leadership, process control, design, supplier management and continual improvement.

Environmental management system standard covering environmental aspects, compliance obligations, the life cycle perspective and emergency preparedness.

Occupational health and safety management system standard covering hazard identification, worker consultation, operational control and incident investigation.

Business continuity management system standard covering business impact analysis, continuity strategies, response plans, exercising and recovery.

Industrial control system security programme for asset owners, covering zones and conduits, configuration management, component security and operational resilience.