Azure Compliance Frameworks
24 Azure compliance frameworks spanning industry standards, government mandates, and security benchmarks. Each framework page lists the Azure controls mapped to it, with the detection tool checks that cover each control.
Core Frameworks
SOC 2
Service Organization Control 2 (SOC 2) is an auditing framework developed by the American Institute of Certified Public Accountants (AICPA) for evalua...
69 controlsGeneral
PCI DSS v4.0The Payment Card Industry Data Security Standard (PCI DSS) version 4.0 is an information security standard for organizations that handle branded credi...
54 controlsGeneralFinancial Services
ISO/IEC 27001:2022ISO/IEC 27001:2022 is the international standard for information security management systems (ISMS).
74 controlsGeneral
NIS2 Directive (EU 2022/2555)The NIS2 Directive (EU 2022/2555) is the European Union's updated cybersecurity legislation that strengthens security requirements for essential and i...
139 controlsRegional
NIST SP 800-53 Rev 5The National Institute of Standards and Technology (NIST) Special Publication 800-53 Revision 5 provides a comprehensive catalog of security and priva...
191 controlsPublic Sector
NIST Cybersecurity Framework v2.0The National Institute of Standards and Technology (NIST) Cybersecurity Framework version 2.
71 controlsGeneral
FedRAMP Moderate Baseline Rev 4The Federal Risk and Authorization Management Program (FedRAMP) Moderate Impact Baseline Revision 4 establishes security requirements for cloud servic...
144 controlsPublic Sector
Common Frameworks
NIST SP 800-171 Rev 2
The National Institute of Standards and Technology (NIST) Special Publication 800-171 Revision 2 provides guidelines for protecting Controlled Unclass...
183 controlsPublic Sector
CIS Azure Benchmark v4.0.0161 controlsAzure-specific
CIS Azure Benchmark v5.0.0133 controlsAzure-specific
Specialized Frameworks
RBI Cyber Security Framework for UCBs
The Reserve Bank of India (RBI) Cyber Security Framework for Urban Cooperative Banks (UCBs) provides baseline cybersecurity standards for urban cooper...
121 controlsFinancial ServicesRegional
RBI IT Framework for NBFCsThe Reserve Bank of India (RBI) Information Technology Framework for Non-Banking Financial Companies (NBFCs) establishes IT governance, security, and ...
95 controlsFinancial ServicesRegional
BSI C5:2025C5 (Cloud Computing Compliance Criteria Catalogue) is a criteria catalogue published by the Federal Office for Information Security (BSI).
132 controlsRegional
CMMC 2.0 Level 2The Cybersecurity Maturity Model Certification (CMMC) Program is a Department of Defense program described in 32 CFR Part 170.
142 controlsPublic Sector
FedRAMP HighThe Federal Risk and Authorization Management Program (FedRAMP) provides a standardized approach for assessing, monitoring, and authorizing cloud comp...
177 controlsPublic Sector
HIPAA HITRUST v9.2HITRUST is an organization governed by representatives from the healthcare industry.
86 controlsHealthcare/Life Sciences
Specialized Frameworks
CIS Azure Benchmark v1.3.0
The CIS Microsoft Azure Foundations Benchmark is published by the Center for Internet Security.
75 controls
CIS Azure Benchmark v1.4.0The CIS Microsoft Azure Foundations Benchmark is published by the Center for Internet Security.
80 controls
CIS Azure Benchmark v1.5.0101 controls
CIS Azure Benchmark v2.0.0The CIS Microsoft Azure Foundations Benchmark is published by the Center for Internet Security (CIS).
165 controls
CIS Azure Benchmark v2.1.0158 controls
CIS Azure Benchmark v3.0.0155 controls
Retired Frameworks (2)
- HIPAA Security Rule 2003— The Health Insurance Portability and Accountability Act (HIPAA) Security Rule, published in February 2003, establishes national standards to protect e...
- PCI DSS v3.2.1— The Payment Card Industry Data Security Standard (PCI DSS) version 3.2.1 is an information security standard for organizations that handle branded cre...