Other standards

Asked for another standard?

The platform covers PCI DSS and Cyber Essentials readiness today. The standards below are planned extensions, with no dates yet. Tell us which one you have been asked for.

Ask for a walkthrough

Covered todayToday

PCI DSS: v4.0.1 · PCI DSS readiness
Cyber Essentials: v3.3 (April 2026) · Cyber Essentials readiness

Planned extensions

Which standards come next.

Each is a planned extension. None can be used today.

Standard	What it is	Where it applies
ISO/IEC 27001:2022	The international standard for an information security management system.	Worldwide
SOC 2	A report on a service organisation's controls, against the AICPA's Trust Services Criteria.	Worldwide, most asked for in the United States
NIST Cybersecurity Framework 2.0	The United States National Institute of Standards and Technology's framework for managing cyber security risk.	Worldwide
SWIFT Customer Security Controls Framework	The security controls that users of the SWIFT network attest against.	Banks and other SWIFT users
ASD Essential Eight	The Australian Signals Directorate's eight strategies for limiting cyber security incidents.	Australia
SAMA Cyber Security Framework	The Saudi Central Bank's framework for the financial institutions it regulates.	Saudi Arabia
CMMI	The capability maturity model from the CMMI Institute, part of ISACA.	Worldwide
CyberFundamentals	The cyber security framework of the Centre for Cybersecurity Belgium.	Belgium
BSI C5	The German Federal Office for Information Security's criteria catalogue for cloud services.	Germany
NIS2	The European Union directive on the security of network and information systems.	European Union
DORA	The European Union's Digital Operational Resilience Act for the financial sector.	European Union

Asked for one of these?

Ask for a walkthrough of what the platform covers today, and tell us which standard you have been asked for.

Ask for a walkthrough

The button opens an email to info@normatiq.io.