Compliance: Regulations, Standards, Frameworks & Tools logopeterindia.net
Knowledge Hub

Compliance: Regulations, Standards, Frameworks & Tools

Frameworks, regulations, regulators, open-source compliance tools and professional bodies — with links to official sources rather than summaries of the rules.

66 topics•8 categories•Updated October 2026

Start Here

8 entries

Where compliance programs usually begin.

01GRC PlatformsEnterprise GRC, compliance automation and open-source options. 02Policy as CodeAutomating policy and compliance checks. 03NIST Cybersecurity FrameworkWidely used framework for managing cybersecurity risk. 04NIST SP 800-53Security and privacy control catalog. 05CIS ControlsPrioritized safeguards for cyber defense. 06Cloud Controls MatrixCloud Security Alliance control framework for cloud services. 07NIST AI Risk Management FrameworkVoluntary framework for managing AI risks. 08NIST Privacy FrameworkFramework for managing privacy risk.

Security & Assurance Standards

10 entries

Frameworks organizations are audited or certified against.

09SOC reports (AICPA)AICPA information on SOC 1, SOC 2 and SOC 3 reports. 10ISO/IEC 27001Information security management system standard; the site blocks automated checks. 11ISO/IEC 27002Information security controls guidance; the site blocks automated checks. 12ISO/IEC 42001AI management system standard; the site blocks automated checks. 13PCI Security Standards CouncilPayment card industry standards including PCI DSS. 14HITRUSTAssurance framework used widely in healthcare. 15FedRAMPUS government program for cloud service security authorization. 16CMMC (US DoD)Cybersecurity Maturity Model Certification for defense contractors; the site blocks automated checks. 17OWASP ASVSApplication Security Verification Standard. 18COBITIT governance framework from ISACA.

Privacy & Data Protection Regulations

8 entries

Primary sources for privacy law.

19GDPR (EUR-Lex)Official text of the EU General Data Protection Regulation. 20GDPR.euPlain-language guide to the GDPR. 21European Commission: data protectionEU data protection law overview. 22European Data Protection BoardEU body that issues GDPR guidelines. 23California CCPACalifornia Attorney General's CCPA page. 24HIPAA (US HHS)US health privacy and security rules; the site blocks automated checks. 25India data protection framework (MeitY)Indian government information on the data protection framework. 26IAPPInternational Association of Privacy Professionals.

Cyber, Resilience & AI Regulation

8 entries

Regulatory regimes for security, resilience and AI.

27EU AI Act: regulatory frameworkEuropean Commission overview of the AI Act. Application dates have been subject to change, so check the current timeline. 28EU AI Act ExplorerIndependent resource on the AI Act text and implementation. 29DORA (EUR-Lex)Official text of the Digital Operational Resilience Act for the EU financial sector. 30NIS2 DirectiveEU directive on network and information security. 31EU Cyber Resilience ActEU rules on cybersecurity of products with digital elements. 32SEC cybersecurity disclosure rulesUS SEC rule on cybersecurity risk management and incident disclosure; the site blocks automated checks. 33ENISAEuropean Union Agency for Cybersecurity. 34CISAUS Cybersecurity and Infrastructure Security Agency.

Compliance as Code & Open-Source Tools

15 entries

Automate checks against benchmarks and frameworks.

35OpenSCAPStandards-based vulnerability and configuration compliance scanning. 36ComplianceAsCode contentSecurity policy content and profiles used with OpenSCAP. 37Chef InSpecChef's compliance product; the older inspec product address now redirects here. 38InSpec repositoryOpen-source InSpec framework for testing infrastructure. 39ProwlerCloud security and compliance checks for AWS, Azure, GCP and more. 40SteampipeQuery cloud APIs with SQL, with compliance mods. 41WazuhOpen-source security monitoring platform with compliance reporting. 42KubescapeKubernetes security and compliance scanning. 43kube-benchChecks Kubernetes against the CIS Benchmark. 44TrivyScanner for vulnerabilities, misconfigurations and secrets. 45Cloud CustodianRules engine for cloud governance and compliance. 46Open Policy AgentGeneral-purpose policy engine for policy as code. 47CISA CSETCybersecurity Evaluation Tool for assessing against standards. 48NIST OSCALOpen Security Controls Assessment Language for machine-readable compliance data. 49Compliance TrestleTooling for managing OSCAL documents as code.

India Regulators & Authorities

4 entries

Primary sources for compliance in India.

50Reserve Bank of IndiaBanking and payments regulator. 51SEBISecurities market regulator. 52CERT-InIndian Computer Emergency Response Team, which issues cybersecurity directions. 53MeitYMinistry of Electronics and Information Technology.

Professional Bodies & News

3 entries

Communities and publications.

54ISACAIT governance, risk and assurance association. 55AICPA & CIMAAccounting body behind the SOC reports. 56Compliance WeekNews and analysis for compliance professionals.

Related Pages

10 entries

Neighbouring pages on this site.

57Privacy ToolsPrivacy management tools. 58CyberprivacyCybersecurity and privacy. 59CybersecurityCybersecurity hub. 60AI Agent Governance SolutionsGoverning AI agents. 61AI Governance and Runtime InspectionAI governance tools. 62Data Governance PlatformsData governance software. 63Kubernetes Security ToolsSecuring Kubernetes. 64Container Security ToolsSecuring containers. 65SIEM SoftwareLog monitoring and security analytics. 66HealthcareHealthcare hub.

Frequently Asked Questions

What is compliance?

Meeting the requirements set by laws, regulations, contracts and standards, and being able to show evidence that you do. Programs typically combine policies, technical controls, monitoring, audits and training.

What is the difference between a regulation and a standard?

Regulations are legal requirements enforced by authorities, such as the GDPR or HIPAA. Standards and frameworks, such as ISO 27001 or SOC 2, are usually voluntary or contractual, though customers and regulators often expect them.

What is compliance as code?

Expressing controls and checks as machine-readable policies or tests that run automatically in pipelines and cloud accounts. Tools such as OpenSCAP, InSpec, Open Policy Agent and OSCAL-based tooling support this approach.

Where do GRC platforms fit?

They organize policies, risks, controls, audits and evidence across frameworks. See the GRC Platforms page for enterprise suites, compliance automation tools and open-source options.

Is this legal advice?

No. This page links to official sources and tools. Requirements depend on your sector and jurisdiction, so confirm them with the regulator and qualified advisers.

How current is this page?

Links and project activity were checked in October 2026. Laws, standards and enforcement dates change and differ by jurisdiction, so confirm current requirements with the regulator or standards body and qualified advisers; this page is a directory, not legal advice. Sites that block automated checks are kept and may need a manual click.