Azure compliance frameworks
24 Azure compliance frameworks spanning industry standards, government mandates, and security benchmarks. Each framework page lists the Azure controls mapped to it, with the detection tool checks that cover each control.
Core frameworks
| Framework | Mapped | Market |
|---|
| SOC 2Service Organization Control 2 (SOC 2) is an auditing framework developed by the American Institute of Certified Public Accountants (AICPA) for evalua... | 69 | General |
|---|
| PCI DSS v4.0The Payment Card Industry Data Security Standard (PCI DSS) version 4.0 is an information security standard for organizations that handle branded credi... | 54 | General, Financial Services |
|---|
| ISO/IEC 27001:2022ISO/IEC 27001:2022 is the international standard for information security management systems (ISMS). | 74 | General |
|---|
| NIS2 Directive (EU 2022/2555)The NIS2 Directive (EU 2022/2555) is the European Union's updated cybersecurity legislation that strengthens security requirements for essential and i... | 139 | Regional |
|---|
| NIST SP 800-53 Rev 5The National Institute of Standards and Technology (NIST) Special Publication 800-53 Revision 5 provides a comprehensive catalog of security and priva... | 191 | Public Sector |
|---|
| NIST Cybersecurity Framework v2.0The National Institute of Standards and Technology (NIST) Cybersecurity Framework version 2. | 71 | General |
|---|
| FedRAMP Moderate Baseline Rev 4The Federal Risk and Authorization Management Program (FedRAMP) Moderate Impact Baseline Revision 4 establishes security requirements for cloud servic... | 145 | Public Sector |
|---|
Specialized frameworks
| Framework | Mapped | Market |
|---|
| RBI Cyber Security Framework for UCBsThe Reserve Bank of India (RBI) Cyber Security Framework for Urban Cooperative Banks (UCBs) provides baseline cybersecurity standards for urban cooper... | 121 | Financial Services, Regional |
|---|
| RBI IT Framework for NBFCsThe Reserve Bank of India (RBI) Information Technology Framework for Non-Banking Financial Companies (NBFCs) establishes IT governance, security, and ... | 95 | Financial Services, Regional |
|---|
| BSI C5:2025C5 (Cloud Computing Compliance Criteria Catalogue) is a criteria catalogue published by the Federal Office for Information Security (BSI). | 132 | Regional |
|---|
| CMMC 2.0 Level 2The Cybersecurity Maturity Model Certification (CMMC) Program is a Department of Defense program described in 32 CFR Part 170. | 143 | Public Sector |
|---|
| FedRAMP HighThe Federal Risk and Authorization Management Program (FedRAMP) provides a standardized approach for assessing, monitoring, and authorizing cloud comp... | 177 | Public Sector |
|---|
| HIPAA HITRUST v9.2HITRUST is an organization governed by representatives from the healthcare industry. | 86 | Healthcare/Life Sciences |
|---|
Specialized frameworks
| Framework | Mapped | Market |
|---|
| HIPAA Security Rule 2003The Health Insurance Portability and Accountability Act (HIPAA) Security Rule, published in February 2003, establishes national standards to protect e... | 115 | |
|---|
Retired frameworks
Superseded versions, kept for reference.
