Cloudanix Achieves AWS Security Competency Status for Its CNAPP+ Platform and Just-in-Time Access Engine

Continuous Compliance, Mapped To Your Cloud

Compliance Frameworks

Cloudanix maps your AWS, Azure, GCP, OCI, and Kubernetes posture to the compliance frameworks that matter to you — from SOC 2, ISO 27001, and PCI DSS to regional standards like DPDPA, RBI, DORA, and more. Explore the frameworks we support.

APRA CPG 234

APRA prudential practice guide for information security.

APRA CPS 234

Australian Prudential Regulation Authority information security standard.

Brazil LGPD

Lei Geral de Proteção de Dados — Brazil's data protection law.

BSI C5

German Cloud Computing Compliance Criteria Catalogue.

CCPA / CPRA

California Consumer Privacy Act, as amended by the CPRA.

CIS Benchmarks

Center for Internet Security benchmarks for cloud and Kubernetes.

CIS Critical Security Controls v8

18 prioritized safeguards for cyber defense.

Cloudanix Best Practice

Cloudanix's baseline for securing cloud resources against misconfigurations.

CMMC 2.0 Level 2

Cybersecurity Maturity Model Certification for the US defense supply chain.

CSA Cloud Controls Matrix v4

Cloud Security Alliance control matrix — the basis of CSA STAR.

DORA

EU Digital Operational Resilience Act for financial entities.

DPDPA

India's Digital Personal Data Protection Act, 2023.

Essential Eight

ACSC baseline mitigation strategies against common cyber threats.

FedRAMP

US federal security authorization for cloud services.

FFIEC

US Federal Financial Institutions Examination Council guidance.

GDPR

EU General Data Protection Regulation for personal data.

Gramm-Leach-Bliley Act

GLBA Safeguards Rule for US financial institutions.

HIPAA

US law protecting the security and privacy of health information.

HITRUST CSF

Harmonized security and privacy framework across ISO, NIST, PCI, and HIPAA.

ISO 27001

The leading international information security management standard.

ISO/IEC 27017

Information security controls tailored for cloud services.

ISO/IEC 27018

Code of practice for protecting PII in public clouds.

ISO/IEC 27701

Privacy Information Management extension to ISO/IEC 27001.

K-ISMS-P

Korea Information Security & Personal Information Management certification.

KSA PDPL

Saudi Arabia Personal Data Protection Law.

MAS TRM

Monetary Authority of Singapore Technology Risk Management guidelines.

MAS TRMG Audit

Streamlined audits against the MAS Technology Risk Management Guidelines.

MITRE ATT&CK (Cloud)

Adversary tactics and techniques across IaaS, SaaS, and identity.

NERC CIP

Critical Infrastructure Protection for the North American power grid.

NIS2 Directive

EU cybersecurity directive across 18 critical sectors.

NIST

Security and privacy controls for risk management.

NIST Cybersecurity Framework

Risk-based approach to managing cybersecurity risk.

NIST SP 800-171

Protecting Controlled Unclassified Information in nonfederal systems.

NYDFS 23 NYCRR 500

New York State Department of Financial Services cybersecurity regulation.

PCI DSS

Payment Card Industry Data Security Standard.

RBI Cyber Security Framework (UCBs)

Reserve Bank of India cyber security framework for cooperative banks.

RBI Master Direction – IT Framework

Reserve Bank of India IT governance, risk, and controls.

Sarbanes-Oxley ITGC

IT General Controls supporting SOX Section 404 for US public companies.

SEBI Cloud Security Adoption Framework

SEBI cloud adoption controls for the Indian securities market.

SOC 1

Controls relevant to a service organization's financial reporting.

SOC 2

Trust service criteria for security, availability, and confidentiality.

StateRAMP

Security authorization for cloud used by US state and local governments.

SWIFT CSCF

Customer Security Controls Framework for the SWIFT network.

TISAX

Trusted Information Security Assessment Exchange for automotive.

UAE Information Assurance (NESA)

United Arab Emirates Information Assurance Standards.

UK NCSC Cyber Assessment Framework

Outcome-based framework for operators of essential services.