Google Cloud Compliance Frameworks
17 Google Cloud compliance frameworks spanning industry standards, government mandates, and security benchmarks. Each framework page lists the Google Cloud controls mapped to it, with the detection tool checks that cover each control.
Core Frameworks
SOC 2
Service Organization Control 2 (SOC 2) is an auditing framework developed by the American Institute of Certified Public Accountants (AICPA) for evalua...
71 controlsGeneral
PCI DSS v4.0The Payment Card Industry Data Security Standard (PCI DSS) version 4.0 is an information security standard for organizations that handle branded credi...
52 controlsGeneralFinancial Services
ISO/IEC 27001:2022ISO/IEC 27001:2022 is the international standard for information security management systems (ISMS).
40 controlsGeneral
NIS2 Directive (EU 2022/2555)The NIS2 Directive (EU 2022/2555) is the European Union's updated cybersecurity legislation that strengthens security requirements for essential and i...
59 controlsRegional
NIST SP 800-53 Rev 5The National Institute of Standards and Technology (NIST) Special Publication 800-53 Revision 5 provides a comprehensive catalog of security and priva...
67 controlsPublic Sector
NIST Cybersecurity Framework v2.0The National Institute of Standards and Technology (NIST) Cybersecurity Framework version 2.
122 controlsGeneral
Common Frameworks
CIS GCP Benchmark v3.0.0
The CIS Benchmarks are security guidelines that institutions across industries can use to assist in the configuration of their environments.
80 controlsGCP-specific
CIS GCP Benchmark v4.0.0The Center for Internet Security (CIS) is a nonprofit that promotes best practices for securing IT systems and data.
81 controlsGCP-specific
Specialized Frameworks
Specialized Frameworks
CIS GCP Benchmark v1.2.0
The Center for Internet Security (CIS) is a nonprofit that promotes best practices for securing IT systems and data.
65 controls
CIS GCP Benchmark v1.3.062 controls
CIS GCP Benchmark v2.0.0The Center for Internet Security (CIS) is a nonprofit that promotes best practices for securing IT systems and data. CIS publishes CIS Benchmarks.
82 controls
GCP Forseti Security v2.2610 controls
NIST Cybersecurity Framework v1.0The Framework for Improving Critical Infrastructure Cybersecurity (Cybersecurity Framework) was developed by NIST and published on February 19, 2014.
62 controls
Retired Frameworks (2)
- HIPAA Security Rule 2003— The Health Insurance Portability and Accountability Act (HIPAA) Security Rule, published in February 2003, establishes national standards to protect e...
- PCI DSS v3.2.1— The Payment Card Industry Data Security Standard (PCI DSS) version 3.2.1 is an information security standard for organizations that handle branded cre...