Standards and legislation in the library
The Audirium framework library connects frameworks, controls and legislation. These pages explain per standard what it requires and how the library covers it.
52
frameworks
3,738
controls
4,291
cross-references
136
shared controls
ISO 27001
ISO/IEC 27001:2022 is the international standard for an information security management system (ISMS). Certifiable, risk-driven and the most widely used anchor for security framewo…
NIS2 and the Dutch Cybersecurity Act
NIS2 (Directive (EU) 2022/2555) obliges essential and important entities to a duty of care, incident reporting and board-level accountability for cybersecurity. In the Netherlands,…
GDPR
The General Data Protection Regulation (Regulation (EU) 2016/679) governs the protection of personal data across the EU: 99 articles on lawfulness, data subject rights, accountabil…
DORA
The Digital Operational Resilience Act (Regulation (EU) 2022/2554) requires financial institutions to demonstrate digital resilience: ICT risk management, incident reporting, resil…
ISO 42001
ISO/IEC 42001:2023 is the first certifiable management system standard for artificial intelligence: responsible use of AI, from risk assessment and data governance to human oversig…