Skip to main content
Intelligent Security Governance — 340+ Frameworks Powered by Ayurak AI

Sample Data — This scorecard displays illustrative data. Connect your environment for real compliance scores.

Board-Ready Compliance Report

Compliance Scorecard

Visual RAG (Red/Amber/Green) compliance status across all 599 frameworks. One-page exportable report for board meetings and executive briefings. Powered by Ayurak AI.

599
Frameworks
74%
Avg Score
155
Compliant
223
Partial
197
At Risk
24
Critical
292
Improving
76,297
Controls
Filters:
Showing 599 of 599 frameworks
RAG Legend:
Compliant (≥85%)
Partially Compliant (70-84%)
At Risk (55-69%)
Non-Compliant (<55%)

ISO 27400

Middle East · Intermediate

51%
63/124 controls
-6%

C5 Germany

Latin America · Intermediate

53%
33/63 controls
-5%

DPDP

Asia Pacific · Foundational

55%
129/235 controls
+6%

PDPA Thailand

APAC · Intermediate

55%
120/219 controls
+5%

Philippines DPA

Global · Intermediate

55%
92/169 controls
-1%

Uruguay Privacy

Global · Foundational

56%
128/230 controls
stable

PDP Indonesia

APAC · Intermediate

56%
30/54 controls
-9%

South Africa Privacy

Global · Foundational

57%
125/221 controls
-7%

VCDPA

North America · Foundational

58%
37/64 controls
+2%

VCDPA

North America · Foundational

58%
37/64 controls
+2%

PDPL KSA

Middle East · Intermediate

59%
122/208 controls
-7%

BIPA

North America · Foundational

59%
100/171 controls
-4%

Kenya Privacy

Global · Foundational

59%
31/54 controls
-3%

Washington Privacy

North America · Foundational

59%
111/189 controls
+8%

PRA SS1/21

Europe · Intermediate

59%
38/65 controls
-7%

NIST SP 800-37

Asia-Pacific · Foundational

59%
38/66 controls
+8%

Colombia Privacy

Global · Foundational

60%
82/138 controls
-5%

Florida Privacy

North America · Foundational

60%
134/224 controls
-3%

TDPSA Texas

Global · Foundational

60%
101/169 controls
+1%

GDPR for Retail

Europe · Foundational

61%
111/182 controls
-3%

COPPA

Middle East · Advanced

62%
26/42 controls
-3%

COPPA

North America · Foundational

63%
115/184 controls
+4%

LPDP Argentina

South America · Foundational

63%
78/125 controls
+5%

GDPR for Energy

Europe · Foundational

63%
132/211 controls
+1%

SOC 1

Latin America · Advanced

63%
54/86 controls
-5%

GDPR for Construction

Europe · Foundational

64%
52/82 controls
+5%

Indonesia Privacy

Global · Foundational

64%
146/229 controls
+5%

APRA CPS 234

Global · Foundational

64%
103/162 controls
-1%

ISO 27018

North America · Foundational

64%
39/62 controls
+6%

CCPA/CPRA

North America · Foundational

67%
93/139 controls
stable

GDPR for Telecom

Europe · Foundational

68%
39/58 controls
-2%

MODPA Maryland

Asia-Pacific · Intermediate

68%
25/37 controls
+6%

Oregon Privacy

North America · Foundational

69%
169/246 controls
+4%

Vietnam Privacy

Global · Foundational

70%
74/107 controls
+1%

NESA UAE

Asia-Pacific · Intermediate

70%
49/71 controls
+5%

Shared Assessments SIG

Latin America · Foundational

70%
37/54 controls
-1%

NDPR

Africa · Foundational

71%
98/139 controls
+6%

CPA

North America · Foundational

71%
102/144 controls
+7%

FERPA

North America · Foundational

72%
123/171 controls
+9%

CCPA (Amended)

North America · Foundational

72%
153/213 controls
-9%

GDPR for Legal

Europe · Foundational

72%
145/202 controls
-7%

Peru Privacy

Global · Foundational

72%
77/107 controls
+2%

CPA

North America · Foundational

73%
89/123 controls
-4%

Nigeria Privacy

Global · Foundational

73%
95/131 controls
-1%

APP

Asia Pacific · Foundational

74%
79/107 controls
+1%

Texas Privacy

North America · Foundational

75%
40/54 controls
stable

Ohio Privacy

North America · Foundational

76%
123/162 controls
-6%

Arizona Privacy

North America · Foundational

76%
117/154 controls
+5%

GDPR

Europe · Foundational

77%
121/158 controls
+10%

MITRE ATT&CK

Europe · Advanced

77%
90/117 controls
+10%

PDPA SG

APAC · Intermediate

78%
57/74 controls
-8%

Privacy Act

APAC · Foundational

78%
120/154 controls
+8%

GDPR for Logistics

Europe · Foundational

78%
147/189 controls
+7%

UCPA

North America · Foundational

79%
193/245 controls
-3%

UCPA

North America · Foundational

79%
193/245 controls
-3%

Philippines Privacy

Global · Foundational

79%
187/237 controls
+9%

PDPA (Singapore)

Asia Pacific · Foundational

80%
46/58 controls
-6%

NDPR

Africa · Foundational

80%
124/155 controls
-5%

NERC CIP-007

Europe · Foundational

80%
128/160 controls
+3%

Argentina Privacy

Global · Foundational

81%
89/110 controls
-7%

CJIS

Europe · Foundational

81%
103/128 controls
-6%

IL2

North America · Intermediate

82%
132/161 controls
-1%

GDPR Lite

Global · Foundational

83%
55/67 controls
-5%

SWIFT CSP

Africa · Advanced

83%
107/129 controls
+2%

NIST SP 800-146

Africa · Intermediate

84%
110/132 controls
+3%

MTSA Cyber

Latin America · Intermediate

84%
36/43 controls
+2%

Chile Privacy

Global · Foundational

86%
94/110 controls
+6%

PSD2

North America · Advanced

86%
70/82 controls
-5%

CTDPA

North America · Foundational

87%
165/190 controls
-1%

CTDPA

North America · Foundational

87%
165/190 controls
-1%

Israel Privacy

Global · Foundational

87%
101/117 controls
-2%

CERT-In Guidelines

Asia-Pacific · Advanced

87%
114/132 controls
+7%

IEC 62443-2-1

Africa · Advanced

87%
40/46 controls
-5%

PDPA Malaysia

APAC · Foundational

89%
68/77 controls
-3%

Egypt PDP

Africa · Intermediate

89%
44/50 controls
+2%

NIST AI RMF

Middle East · Foundational

90%
97/108 controls
+10%

Taiwan Privacy

Global · Foundational

91%
165/182 controls
+6%

New Jersey Privacy

North America · Foundational

91%
136/150 controls
+1%

Georgia Privacy

North America · Foundational

91%
155/171 controls
+10%

GDPR Startup

Global · Foundational

91%
67/74 controls
+6%

PDPL UAE

Middle East · Intermediate

92%
142/155 controls
+1%

GDPR for Education

Europe · Foundational

92%
51/56 controls
-8%

Egypt Privacy

Global · Foundational

92%
173/189 controls
-4%

Turkey Privacy

Global · Foundational

93%
187/202 controls
-5%

Digital Services Act

Global · Advanced

93%
64/69 controls
-7%

Chile Privacy

South America · Foundational

94%
118/126 controls
+1%

Argentina PDPA

South America · Foundational

94%
67/72 controls
+9%

Nevada Privacy

North America · Foundational

94%
218/232 controls
-1%

HKMA TM-G-1

Africa · Foundational

94%
103/110 controls
-4%

MITRE D3FEND

Asia-Pacific · Foundational

51%
91/179 controls
-8%

FTI

Asia-Pacific · Intermediate

52%
31/60 controls
-3%

BAIT

Europe · Advanced

55%
84/154 controls
+10%

BoT Cyber

Asia Pacific · Intermediate

55%
111/203 controls
-2%

PCI P2PE

Global · Advanced

55%
73/133 controls
-3%

PCI TSP

Global · Advanced

56%
100/179 controls
-5%

Reg SCI

North America · Advanced

56%
122/219 controls
-2%

EU AI Act

Latin America · Intermediate

56%
51/92 controls
stable

NIST MEP Cyber

Africa · Advanced

56%
54/98 controls
-1%

NYDFS Part 500

North America · Advanced

57%
130/229 controls
stable

TIBER-EU

Europe · Advanced

58%
52/91 controls
+9%

APRA CPS 234

Asia Pacific · Advanced

58%
68/118 controls
+1%

MAS Guidelines

Asia Pacific · Advanced

58%
89/154 controls
-2%

GLBA

North America · Intermediate

59%
59/101 controls
+5%

MAS TRM

Asia Pacific · Advanced

59%
76/130 controls
-7%

MAS TRM

APAC · Advanced

59%
76/130 controls
-7%

RBI Cyber

APAC · Advanced

59%
116/197 controls
-9%

GLBA

Global · Foundational

61%
31/51 controls
-3%

Digital Markets Act

North America · Foundational

61%
18/31 controls
+10%

NERC CIP-008

Asia-Pacific · Intermediate

61%
18/31 controls
-1%

CSA STAR

Middle East · Advanced

62%
26/42 controls
+1%

OSCPAR

Asia Pacific · Advanced

63%
69/110 controls
+5%

FCA Cyber

Asia-Pacific · Advanced

63%
73/116 controls
-4%

PCI 3DS

Global · Advanced

64%
90/141 controls
+2%

FCA Handbook

Europe · Advanced

65%
140/216 controls
-6%

HKMA SPM

Asia Pacific · Advanced

65%
45/70 controls
+7%

CBB Cyber

Middle East · Intermediate

65%
98/152 controls
-6%

HKMA SPM

APAC · Intermediate

65%
45/70 controls
+7%

NIST SP 800-39

Middle East · Intermediate

65%
44/68 controls
-6%

NYDFS 500

North America · Advanced

66%
93/141 controls
+2%

SOC 3

Africa · Foundational

66%
96/146 controls
+5%

SOX

North America · Foundational

67%
56/85 controls
+4%

PCI DSS

Global · Foundational

69%
133/194 controls
+5%

DORA

Europe · Advanced

69%
38/56 controls
+1%

HKMA TM-G-1

APAC · Intermediate

69%
97/141 controls
-5%

OCPA Oregon

North America · Intermediate

69%
89/129 controls
stable

FINMA

Europe · Advanced

71%
100/142 controls
+2%

Mexico Fintech

North America · Intermediate

71%
72/102 controls
+10%

MNDPA Minnesota

Middle East · Advanced

71%
39/56 controls
stable

FCA FG16/5

Europe · Intermediate

72%
79/110 controls
-8%

RBI Cyber Framework

Middle East · Foundational

72%
87/121 controls
+4%

HKMA CRA

Asia Pacific · Advanced

73%
163/224 controls
stable

ISO 27553

Latin America · Advanced

73%
105/144 controls
+6%

RBI CSF

Asia Pacific · Intermediate

76%
138/182 controls
+3%

NIST SP 800-160

Global · Advanced

76%
81/107 controls
-4%

SecNumCloud France

Africa · Advanced

77%
37/49 controls
-7%

IL4

Europe · Advanced

78%
99/128 controls
+4%

PCI PIN

Global · Advanced

79%
113/144 controls
-3%

FINRA Cyber

North America · Intermediate

79%
46/59 controls
+9%

BNM RMiT

Asia Pacific · Advanced

80%
46/58 controls
+5%

MiFID II IT

Europe · Foundational

80%
65/82 controls
+1%

PCI SSF

Global · Advanced

81%
185/229 controls
+8%

SWIFT CSP

Global · Advanced

81%
174/216 controls
-1%

OSFI B-13

North America · Advanced

81%
187/232 controls
-3%

EBA ICT

Europe · Advanced

82%
196/240 controls
+10%

ISO 27019

Europe · Intermediate

82%
104/127 controls
-5%

FINMA

Europe · Advanced

84%
150/179 controls
+1%

SAMA Cyber

Middle East · Advanced

86%
206/240 controls
-1%

Oman CB

Middle East · Intermediate

86%
79/93 controls
-3%

MAS Cloud

APAC · Advanced

86%
197/230 controls
-8%

SFC Cyber Guidelines

Global · Intermediate

86%
103/120 controls
-6%

PRA SS1/21

Europe · Advanced

87%
175/202 controls
-4%

Safeguards Rule

North America · Intermediate

87%
88/102 controls
-5%

PSD2

Europe · Advanced

88%
44/50 controls
+1%

KAIT

Europe · Advanced

88%
183/208 controls
+6%

PSD2

Europe · Advanced

88%
44/50 controls
+1%

Vietnam Cybersecurity

North America · Advanced

88%
97/111 controls
+1%

MAS TRM

North America · Intermediate

90%
61/68 controls
-8%

IEC 62443-3-3

Global · Foundational

90%
128/143 controls
-8%

FFIEC

North America · Advanced

91%
63/70 controls
-1%

VPPA

Latin America · Foundational

91%
47/52 controls
-4%

OOG

Asia Pacific · Intermediate

92%
135/147 controls
+5%

BACEN

South America · Advanced

92%
213/232 controls
-7%

CAIQ

Africa · Intermediate

92%
134/146 controls
-4%

CSSF

Europe · Advanced

93%
64/69 controls
-5%

CPS 234

APAC · Advanced

93%
101/109 controls
+2%

RMiT

Asia Pacific · Advanced

94%
203/216 controls
-4%

Malaysia PDPA

Europe · Foundational

51%
19/39 controls
-3%

DORA RTS

Middle East · Foundational

52%
63/122 controls
-2%

NHDPA New Hampshire

Latin America · Foundational

54%
96/179 controls
-3%

IL5

Asia-Pacific · Foundational

56%
97/174 controls
-3%

SEBI Cyber Framework

Latin America · Intermediate

59%
64/110 controls
+3%

CCM v4

Global · Advanced

59%
41/70 controls
+3%

Solvency II IT

Asia-Pacific · Intermediate

60%
43/72 controls
-9%

MITRE ATLAS

Middle East · Intermediate

60%
50/84 controls
+10%

PHIPA

North America · Intermediate

61%
50/82 controls
-8%

SOX IT Controls

Latin America · Foundational

62%
61/99 controls
+4%

BIPA

Africa · Intermediate

62%
49/80 controls
-2%

HITECH

North America · Foundational

63%
139/221 controls
-2%

WebTrust

Global · Intermediate

63%
20/32 controls
stable

DICOM Security

Global · Advanced

65%
81/126 controls
+4%

IEC 62443-4-1

North America · Intermediate

66%
110/168 controls
-2%

HIPAA

North America · Foundational

68%
46/69 controls
-8%

HITRUST CSF

North America · Advanced

69%
103/150 controls
-7%

ADHICS

Middle East · Advanced

71%
140/198 controls
+3%

ISO 27032

Asia-Pacific · Advanced

71%
92/130 controls
+3%

ISO 13485

Global · Advanced

73%
142/195 controls
-1%

PDPA Thailand

Europe · Advanced

73%
119/164 controls
+2%

FFIEC

North America · Intermediate

74%
79/108 controls
-4%

ANSSI Guidelines

Global · Foundational

74%
122/165 controls
-6%

MHMDA

North America · Advanced

75%
45/61 controls
+5%

EU MDR

Europe · Advanced

76%
60/80 controls
+5%

HIPAA Startup

Global · Foundational

76%
105/139 controls
-9%

ISO 27555

Africa · Foundational

77%
24/32 controls
+1%

Data Governance Act

Europe · Intermediate

78%
48/62 controls
stable

NERC CIP-009

Middle East · Advanced

78%
48/62 controls
-2%

NIST SP 800-161

North America · Foundational

81%
59/73 controls
+8%

Cyber Essentials Plus

Global · Foundational

81%
95/118 controls
-2%

NIST SP 800-30

Latin America · Advanced

84%
146/174 controls
+7%

21 CFR Part 11

North America · Intermediate

86%
86/101 controls
-6%

SAFE-BioPharma

Global · Advanced

87%
88/102 controls
+4%

MARS-E

North America · Advanced

87%
178/205 controls
+1%

HIPAA Lite

Global · Foundational

87%
87/101 controls
+2%

MAS Cyber Hygiene

North America · Advanced

87%
86/99 controls
-8%

NHS DSP

Europe · Intermediate

88%
84/96 controls
+8%

ITAR

Middle East · Advanced

88%
66/75 controls
+10%

HL7 Security

Global · Advanced

92%
203/221 controls
-5%

MCDPA Montana

Europe · Advanced

92%
151/165 controls
-6%

GxP

Global · Advanced

93%
113/122 controls
-7%

IEEE 7000

Africa · Advanced

94%
97/104 controls
stable

Taiwan PDPA

Asia-Pacific · Intermediate

50%
26/53 controls
+1%

EAR

Latin America · Foundational

52%
73/142 controls
+6%

IRDAI Cyber

Africa · Advanced

52%
66/127 controls
+5%

SysTrust

North America · Advanced

53%
63/119 controls
-8%

OWASP Top 10

Latin America · Advanced

53%
30/58 controls
+7%

NERC CIP-010

Latin America · Foundational

54%
27/50 controls
-2%

ISO 27035

Middle East · Foundational

55%
71/130 controls
-3%

NIST 800-30

North America · Intermediate

56%
92/166 controls
+7%

NIST 800-30

North America · Intermediate

56%
92/166 controls
+7%

NIST SP 800-181

Europe · Intermediate

57%
29/52 controls
-5%

IEC 62443-4-2

Europe · Advanced

57%
53/94 controls
+2%

CJIS

North America · Advanced

58%
95/165 controls
-4%

NIST 800-63

North America · Advanced

58%
28/50 controls
-1%

NCA ECC

Middle East · Foundational

61%
69/114 controls
+9%

NIST 800-37

North America · Advanced

62%
40/66 controls
+10%

NIST 800-37

North America · Advanced

62%
40/66 controls
+10%

DoD IL4

North America · Advanced

63%
53/85 controls
+10%

NIST 800-137

North America · Advanced

64%
139/218 controls
-4%

ISR Qatar

Middle East · Advanced

65%
157/243 controls
-7%

OECD AI Principles

Global · Foundational

65%
38/59 controls
stable

DPDPA Delaware

Asia-Pacific · Foundational

67%
119/179 controls
-6%

NIST 800-61

North America · Intermediate

68%
145/214 controls
-1%

SHIELD Act NY

Global · Advanced

68%
29/44 controls
+1%

NJDPA New Jersey

Africa · Intermediate

68%
38/57 controls
-3%

ENS

Europe · Intermediate

70%
169/242 controls
+7%

ITAR

North America · Advanced

71%
117/166 controls
-6%

FIPS 140-2

North America · Advanced

71%
64/91 controls
+3%

DISA STIG

North America · Advanced

71%
54/77 controls
-9%

NIST 800-145

North America · Foundational

71%
173/245 controls
+6%

NIST 800-88

North America · Intermediate

72%
101/141 controls
+2%

DoD IL5

North America · Advanced

72%
63/88 controls
+4%

NESA IAS

Middle East · Advanced

72%
111/155 controls
+3%

NIST SP 800-61

Africa · Foundational

72%
36/51 controls
+8%

NCUA

Europe · Advanced

73%
56/77 controls
-1%

ISR

Middle East · Intermediate

74%
39/53 controls
stable

SOCI Act

APAC · Advanced

76%
44/58 controls
-4%

STAR Level 2

North America · Foundational

76%
34/45 controls
+6%

CMMC

North America · Advanced

77%
93/122 controls
+8%

NIST 800-171

North America · Advanced

77%
65/85 controls
-5%

ADSIC

Middle East · Intermediate

77%
71/93 controls
-7%

NIST 800-190

North America · Advanced

77%
87/114 controls
-2%

LGPD Brazil

Asia-Pacific · Foundational

78%
30/39 controls
+8%

DORA ITS

Latin America · Intermediate

78%
46/60 controls
stable

ISO 27557

Global · Intermediate

78%
120/154 controls
stable

NIST 800-82

North America · Advanced

79%
136/173 controls
+6%

NIST 800-115

North America · Intermediate

79%
161/205 controls
+8%

NIST 800-82

North America · Advanced

79%
136/173 controls
+6%

FIPS 140-3

North America · Advanced

80%
87/109 controls
-7%

Data Act EU

Asia-Pacific · Advanced

80%
100/126 controls
+4%

IL6

Middle East · Intermediate

80%
98/123 controls
-2%

AgID

Europe · Intermediate

81%
111/138 controls
-5%

DoD IL6

North America · Advanced

81%
162/200 controls
+10%

IORP II

Middle East · Advanced

82%
98/120 controls
-3%

FedRAMP

North America · Advanced

83%
117/141 controls
-7%

NIST 800-207

North America · Advanced

84%
98/117 controls
-1%

ENS Spain

North America · Intermediate

84%
118/141 controls
+10%

FISMA

North America · Advanced

85%
138/163 controls
+7%

IRAP

Asia Pacific · Advanced

85%
206/243 controls
+10%

IRAP

APAC · Advanced

85%
206/243 controls
+10%

NZ ISM

APAC · Advanced

85%
103/122 controls
stable

ENS

Europe · Advanced

85%
170/200 controls
-6%

NIST 800-161

North America · Advanced

88%
139/158 controls
-5%

AgID

Europe · Intermediate

89%
89/101 controls
+4%

COBIT 2019

Africa · Intermediate

89%
35/40 controls
-5%

BSP Circular 982

Europe · Foundational

90%
58/65 controls
+5%

NIST 800-53

North America · Advanced

92%
130/142 controls
-5%

NIST 800-39

North America · Advanced

92%
92/101 controls
+10%

ISMAP

Asia Pacific · Advanced

93%
120/130 controls
+2%

IASME Governance

North America · Intermediate

93%
142/153 controls
+10%

NCA CSCC

Middle East · Advanced

55%
51/94 controls
-1%

NCA CSCC

Middle East · Advanced

55%
51/94 controls
-1%

AIFMD IT Controls

Latin America · Foundational

56%
22/40 controls
-4%

SB-327 California

North America · Foundational

56%
91/163 controls
+2%

NIST SP 800-86

Global · Intermediate

57%
96/169 controls
+6%

TIPA Tennessee

Middle East · Intermediate

57%
41/73 controls
-4%

CIS GCP

Global · Advanced

61%
82/136 controls
-2%

ISO 27559

North America · Advanced

61%
48/80 controls
+3%

DFARS 252.204-7012

Africa · Intermediate

64%
27/43 controls
+9%

Singapore AI Gov

North America · Intermediate

65%
85/132 controls
+3%

OWASP ASVS

Africa · Foundational

69%
62/91 controls
-3%

ISA 99

Asia-Pacific · Foundational

69%
82/119 controls
+9%

SecNumCloud

Europe · Advanced

72%
43/61 controls
stable

CSA STAR

Global · Advanced

72%
177/246 controls
+8%

C5

Europe · Advanced

72%
43/61 controls
+7%

SecNumCloud

Europe · Advanced

72%
138/192 controls
-9%

eIDAS 2.0

Middle East · Foundational

73%
127/175 controls
+9%

ISO 27036

Latin America · Intermediate

74%
119/161 controls
+10%

CNSS 1253

Latin America · Advanced

75%
86/115 controls
stable

MTCS

Asia Pacific · Advanced

78%
122/157 controls
-8%

SOC 2+

Europe · Intermediate

78%
59/76 controls
+9%

Hong Kong PDPO

Middle East · Advanced

79%
51/65 controls
+5%

AT-C 205

Europe · Foundational

79%
79/101 controls
-7%

NIST SP 800-183

Asia-Pacific · Advanced

79%
36/46 controls
+10%

NABH

Global · Foundational

80%
143/179 controls
stable

ITIL 4

Global · Advanced

81%
103/128 controls
-5%

BOT Cyber

Asia-Pacific · Intermediate

84%
136/163 controls
-9%

CSA CCM

Global · Advanced

85%
59/70 controls
stable

RICDPA Rhode Island

Global · Advanced

86%
32/38 controls
-8%

OCC Guidelines

Asia-Pacific · Foundational

89%
114/129 controls
-7%

MiCA

Africa · Advanced

92%
66/72 controls
+5%

CAF UK

Europe · Advanced

93%
119/129 controls
+6%

POPIA South Africa

Middle East · Intermediate

94%
133/142 controls
-5%

AgID Italy

Europe · Advanced

94%
75/80 controls
+10%

NERC CIP-011

Africa · Intermediate

94%
55/59 controls
+9%

China PIPL

Europe · Advanced

51%
55/109 controls
-1%

AICPA TSC 2017

Asia-Pacific · Intermediate

54%
51/96 controls
+5%

OWASP SAMM

Global · Advanced

55%
67/122 controls
+1%

Annex 11

Europe · Advanced

55%
124/226 controls
+9%

Basel III IT Risk

Global · Foundational

55%
79/145 controls
+4%

VCPA Vermont

North America · Foundational

55%
53/98 controls
stable

K-ISMS

APAC · Advanced

57%
39/70 controls
+7%

SOC 2 for Legal

North America · Foundational

57%
94/166 controls
+3%

NERC CIP-013

Global · Advanced

57%
38/68 controls
-6%

SSP Source Code

Global · Intermediate

58%
100/173 controls
-6%

NERC CIP

North America · Advanced

61%
113/186 controls
-9%

SOC 2 for Construction

North America · Foundational

61%
62/102 controls
+2%

UL 2900

Global · Advanced

62%
47/77 controls
+10%

eIDAS

Europe · Intermediate

62%
82/133 controls
+6%

C2M2

North America · Advanced

62%
65/106 controls
+6%

eIDAS

Europe · Intermediate

63%
105/168 controls
+3%

CAF

Europe · Advanced

63%
127/202 controls
-2%

Zero Trust

North America · Advanced

63%
61/98 controls
stable

SOC 2 for Education

North America · Foundational

64%
136/214 controls
-8%

SSDF

North America · Advanced

64%
47/74 controls
-4%

UNECE WP.29

Latin America · Intermediate

66%
98/149 controls
stable

TAPA

Global · Intermediate

67%
75/112 controls
+6%

DO-178C

Global · Advanced

67%
132/198 controls
-8%

DO-178C

Global · Advanced

67%
132/198 controls
-8%

ISO 27037

Africa · Advanced

67%
50/75 controls
+7%

IRS 1075

Africa · Foundational

67%
42/64 controls
+5%

NERC CIP-002

North America · Advanced

68%
78/115 controls
-5%

Bill C-11

North America · Advanced

68%
61/91 controls
-6%

IVDR

Europe · Advanced

69%
113/165 controls
-6%

TSR

Europe · Advanced

69%
122/178 controls
-8%

ISMAP

APAC · Advanced

69%
130/189 controls
+5%

MPA Content Security

Global · Intermediate

70%
54/78 controls
+3%

SOC 2 Startup

Global · Foundational

70%
89/128 controls
+4%

DO-326A

Global · Advanced

72%
168/234 controls
+6%

ES-C2M2

North America · Advanced

73%
169/232 controls
-4%

AESCS

APAC · Advanced

74%
71/96 controls
-4%

CBRC Guidelines China

Middle East · Advanced

74%
35/48 controls
-4%

NIST SP 800-190

Middle East · Foundational

74%
115/156 controls
-7%

AES CSF

Asia Pacific · Advanced

75%
138/184 controls
-6%

NERC CIP-002

Middle East · Intermediate

75%
54/73 controls
-7%

SCAP

Global · Advanced

76%
127/168 controls
+8%

NERC CIP-003

North America · Advanced

78%
60/77 controls
-2%

Australia Privacy Act

Latin America · Foundational

78%
82/106 controls
-5%

OWASP Top 10

Global · Foundational

79%
46/59 controls
+1%

FCC CPNI

North America · Intermediate

79%
172/218 controls
-6%

PIPEDA Canada

Latin America · Advanced

79%
52/67 controls
+8%

FDA 21 CFR Part 11

Africa · Intermediate

79%
68/87 controls
-5%

21 CFR Part 11

North America · Advanced

81%
98/122 controls
+4%

OSC

Global · Intermediate

81%
94/117 controls
+5%

UK DPA 2018

Global · Advanced

81%
59/73 controls
stable

OWASP SAMM

Global · Intermediate

81%
35/44 controls
-4%

OWASP ASVS

Global · Advanced

82%
196/240 controls
-5%

ONG-C2M2

North America · Advanced

82%
188/230 controls
+5%

TSA Pipeline

North America · Advanced

82%
132/162 controls
-8%

BaFin BAIT

Asia-Pacific · Foundational

82%
54/67 controls
+8%

DO-254

Global · Advanced

83%
147/178 controls
+1%

MDR

Europe · Advanced

83%
84/102 controls
-7%

BSIMM

Global · Advanced

84%
141/168 controls
-4%

ETSI EN 303 645

Europe · Intermediate

84%
75/90 controls
+3%

CRA

Europe · Advanced

84%
169/202 controls
+8%

FIPA Florida

Latin America · Advanced

84%
93/111 controls
-2%

IATA SeMS

Global · Advanced

85%
144/170 controls
stable

HITRUST e1

Asia-Pacific · Advanced

86%
77/90 controls
-3%

ISO 22301

North America · Foundational

88%
32/37 controls
+1%

NERC CIP

Middle East · Intermediate

88%
83/95 controls
+8%

Common Criteria

Global · Advanced

89%
75/85 controls
+9%

SAMA Cyber Framework

North America · Intermediate

89%
154/174 controls
-9%

SOC 2 for Logistics

North America · Foundational

90%
208/232 controls
-4%

NIST SP 800-92

North America · Advanced

90%
54/60 controls
-6%

SOC 2 for Telecom

North America · Foundational

91%
125/138 controls
+5%

ioXt

Global · Intermediate

92%
178/194 controls
+10%

ENISA Guidelines

Europe · Foundational

92%
108/118 controls
+1%

CPRA Regulations

Europe · Intermediate

92%
84/92 controls
-2%

C5

Europe · Advanced

93%
119/128 controls
+10%

GxP

Global · Advanced

93%
113/122 controls
-7%

AWS FTR

Global · Intermediate

93%
178/192 controls
+10%

AS 9100

Global · Advanced

94%
205/219 controls
+10%

SOC 2 for Energy

North America · Foundational

94%
78/83 controls
-4%

AICPA SOC for Cybersecurity

Middle East · Advanced

52%
75/146 controls
-9%

GxP

Global · Advanced

56%
85/152 controls
-1%

NJDPA

Africa · Foundational

59%
69/118 controls
-6%

HITRUST i1

Middle East · Foundational

60%
35/59 controls
+4%

OWASP MASVS

North America · Advanced

61%
75/124 controls
-2%

Model AI Governance

APAC · Intermediate

62%
39/64 controls
stable

ISO 42001

Global · Advanced

64%
97/152 controls
+2%

NZ Privacy Act

Africa · Intermediate

64%
76/119 controls
-2%

Japan APPI

Asia-Pacific · Foundational

66%
59/90 controls
+1%

MARS-E

Global · Intermediate

66%
66/100 controls
-9%

NERC CIP-003

Latin America · Advanced

66%
95/144 controls
-6%

WDPA Washington

Europe · Intermediate

69%
86/125 controls
-2%

VAIT

Europe · Advanced

71%
138/195 controls
+7%

FSA Japan

Latin America · Foundational

72%
25/35 controls
-5%

ePrivacy Directive

North America · Foundational

73%
27/37 controls
+8%

NIST AI RMF

North America · Advanced

75%
183/245 controls
-8%

Model AI Gov

Asia Pacific · Intermediate

75%
56/75 controls
-8%

NIST SP 800-207

Latin America · Intermediate

75%
120/160 controls
+5%

ISO 27040

Global · Foundational

76%
102/135 controls
+10%

EU AI Act

Europe · Advanced

78%
85/109 controls
+10%

EU AI Act

Europe · Advanced

78%
85/109 controls
+10%

UK AI White Paper

Europe · Foundational

79%
176/224 controls
+10%

CBB Cyber Framework

Europe · Advanced

79%
71/90 controls
-2%

CPA Colorado

Asia-Pacific · Advanced

79%
30/38 controls
+8%

UNESCO AI Ethics

Global · Foundational

81%
186/230 controls
-3%

SOC 2 for Retail

North America · Foundational

83%
132/160 controls
-8%

BCBS 239

North America · Intermediate

83%
131/158 controls
-7%

NERC CIP-014

North America · Foundational

83%
53/64 controls
-3%

NIST SP 800-115

Europe · Foundational

85%
151/178 controls
-1%

OECD AI Principles

Global · Foundational

87%
144/166 controls
-3%

ISO 31000

Europe · Intermediate

87%
28/33 controls
-1%

ETSI EN 303 645

Asia-Pacific · Intermediate

87%
142/164 controls
-4%

NIST CSF for Retail

North America · Foundational

88%
185/211 controls
-2%

AIDA

North America · Intermediate

89%
199/224 controls
+7%

ISO/SAE 21434

Africa · Advanced

89%
100/113 controls
+3%

FAIR

Global · Advanced

90%
172/192 controls
-1%

PDPL Saudi Arabia

Africa · Foundational

91%
154/170 controls
+7%

China AI Measures

Asia Pacific · Advanced

92%
222/242 controls
+8%

ISO 27001 for Retail

Global · Foundational

94%
207/221 controls
+9%

IEC 62443

Latin America · Advanced

94%
74/79 controls
+8%

BaFin VAIT

Middle East · Intermediate

94%
44/47 controls
+4%

ISA/IEC 62443

Africa · Foundational

51%
72/143 controls
-1%

BCBS 350

Europe · Advanced

54%
34/63 controls
+7%

CIS Benchmarks

Global · Advanced

55%
105/192 controls
+5%

ISO 27001 for Construction

Global · Foundational

55%
94/171 controls
+5%

NIST SP 800-137

Asia-Pacific · Intermediate

56%
61/110 controls
-7%

NIST CSF for Energy

North America · Foundational

57%
67/118 controls
-6%

CIS Controls

Global · Foundational

59%
33/56 controls
+3%

IRAP Australia

Global · Advanced

59%
96/164 controls
-7%

APRA CPS 220

Africa · Intermediate

60%
83/139 controls
-2%

DIFC DP Law

Global · Intermediate

61%
33/55 controls
-2%

CIS Azure

Global · Advanced

62%
107/174 controls
+10%

ISO 26262

Global · Foundational

62%
36/59 controls
+9%

ISO 22301

Global · Intermediate

64%
47/74 controls
-1%

ISO 19011

Global · Foundational

64%
35/56 controls
+6%

ISO 22301

Global · Advanced

64%
47/74 controls
-1%

NIST SP 800-210

Africa · Advanced

64%
62/98 controls
+8%

NIST CSF for Legal

North America · Foundational

65%
112/173 controls
-7%

VCDPA Virginia

Middle East · Foundational

65%
111/172 controls
+7%

Cyber Essentials

Europe · Foundational

66%
49/75 controls
-6%

ISO 27001 for Legal

Global · Foundational

66%
141/214 controls
-8%

ISO 27001 Startup

Global · Foundational

66%
125/190 controls
-6%

ISO 27001 for Education

Global · Foundational

67%
144/216 controls
-2%

NIST Privacy Framework

Latin America · Foundational

67%
61/92 controls
+6%

CIS Kubernetes

Global · Advanced

68%
46/69 controls
-7%

ISO 29100

Global · Intermediate

70%
98/141 controls
-1%

ISO 9001

Global · Foundational

71%
92/130 controls
+10%

ISO 27005

Global · Intermediate

71%
149/211 controls
+7%

CIS AWS

Global · Advanced

71%
66/94 controls
-5%

NIST CSF for Education

North America · Foundational

73%
101/139 controls
+7%

ISO 27002

Global · Intermediate

74%
175/237 controls
-4%

ISO 27035

Global · Intermediate

75%
162/216 controls
-7%

ISO 27017

Global · Advanced

76%
168/222 controls
+1%

ISO 27017

Global · Advanced

76%
168/222 controls
+1%

ISO 20000

Global · Foundational

77%
53/70 controls
+5%

ISO 20000

Global · Advanced

77%
53/70 controls
+5%

ISO 31000

Global · Intermediate

78%
157/202 controls
-2%

ISO 27018

Global · Advanced

78%
114/147 controls
-3%

ISO 27032

Global · Intermediate

78%
95/122 controls
+7%

ISO 31000

Global · Intermediate

78%
157/202 controls
-2%

ISO 27018

Global · Advanced

78%
114/147 controls
-3%

NIST CSF Lite

Global · Foundational

79%
48/62 controls
-2%

ISO 27701

Global · Advanced

80%
160/200 controls
-6%

ISO 27701

Global · Advanced

80%
160/200 controls
-6%

GAMP 5

North America · Foundational

80%
128/160 controls
-5%

CIS RAM

Global · Intermediate

81%
150/186 controls
stable

HITRUST r2

Latin America · Intermediate

81%
93/115 controls
+2%

ISO 27001

Global · Foundational

82%
54/66 controls
-4%

ISO 15408

Global · Advanced

82%
116/142 controls
+9%

South Korea PIPA

Middle East · Intermediate

82%
54/67 controls
-5%

BSIMM

Europe · Foundational

84%
44/53 controls
+9%

ISO 23894

Global · Advanced

86%
73/86 controls
+9%

ISO 27001 for Logistics

Global · Foundational

86%
78/91 controls
-1%

ISO 27001 Lite

Global · Foundational

86%
135/158 controls
+1%

CBK Cyber

Asia-Pacific · Foundational

86%
76/89 controls
+4%

ISO 27043

North America · Intermediate

86%
87/102 controls
+5%

RED Directive

Middle East · Advanced

86%
120/140 controls
+4%

ICDPA Iowa

Global · Intermediate

86%
48/56 controls
+8%

ISO 27001 for Energy

Global · Foundational

87%
154/178 controls
-4%

BaFin KAIT

Latin America · Advanced

87%
37/43 controls
+6%

NIST CSF for Construction

North America · Foundational

88%
218/248 controls
-5%

PECR

Europe · Intermediate

88%
85/97 controls
+7%

NIST CSF

North America · Foundational

89%
142/160 controls
+1%

ISO 20000

Asia-Pacific · Advanced

89%
54/61 controls
+7%

Cyber Trust Mark

Asia-Pacific · Advanced

89%
30/34 controls
+4%

NIST CSF for Logistics

North America · Foundational

90%
175/195 controls
-2%

CLIA

North America · Advanced

90%
98/109 controls
-4%

NIST CSF Startup

Global · Foundational

91%
91/101 controls
+5%

TSA Pipeline Security

Europe · Intermediate

91%
153/169 controls
stable

NIS2

Europe · Intermediate

92%
75/82 controls
-8%

NIST CSF for Telecom

North America · Foundational

92%
206/224 controls
-7%

ISO 27001 for Telecom

Global · Foundational

94%
204/218 controls
+7%

NERC CIP-004

Africa · Foundational

94%
94/101 controls
-2%

ISO 27050

Europe · Advanced

50%
80/160 controls
-1%

NIS Directive

Latin America · Foundational

51%
36/71 controls
+10%

NZ ISM

North America · Foundational

53%
84/160 controls
-6%

RBNZ BS11

Global · Advanced

55%
16/30 controls
-5%

ISO 27701

Africa · Intermediate

57%
55/98 controls
+7%

NIST SP 800-218

Global · Foundational

58%
67/116 controls
-5%

ISO 21434

Global · Advanced

60%
82/138 controls
+5%

ISO 21434

Global · Advanced

60%
82/138 controls
+5%

ICH Q9

Europe · Intermediate

62%
24/39 controls
-8%

42 CFR Part 2

Europe · Foundational

62%
27/45 controls
-8%

CFATS

North America · Advanced

63%
132/211 controls
stable

India DPDP

Latin America · Advanced

63%
63/101 controls
+5%

NIST IoT

Middle East · Foundational

63%
39/63 controls
+2%

NERC CIP-005

Global · Intermediate

68%
97/143 controls
-5%

SAE J3061

Global · Advanced

69%
38/56 controls
+4%

GAMP 5

Global · Advanced

69%
125/182 controls
-2%

UN R155

Global · Advanced

71%
46/66 controls
+9%

ISO 9001

Global · Foundational

71%
92/130 controls
+10%

ISO 9001

Middle East · Foundational

71%
49/70 controls
+6%

ASPICE

Global · Advanced

72%
67/94 controls
+7%

INDPA Indiana

North America · Advanced

73%
97/134 controls
-6%

IEC 62443

Global · Advanced

75%
37/50 controls
-7%

IEC 62443

Global · Advanced

75%
37/50 controls
-7%

ISAE 3402

Asia-Pacific · Foundational

75%
48/65 controls
+8%

NIST SP 800-144

Middle East · Advanced

76%
120/159 controls
-9%

ISO 14001

Global · Intermediate

77%
71/93 controls
+9%

EBA Guidelines

Africa · Foundational

80%
122/153 controls
+8%

ADGM DP Regs

North America · Advanced

81%
140/174 controls
stable

IATF 16949

Global · Advanced

83%
156/189 controls
-8%

CTDPA Connecticut

Latin America · Intermediate

85%
96/114 controls
-3%

TISAX

Europe · Advanced

86%
158/184 controls
+3%

NIST 800-171

Global · Intermediate

87%
100/116 controls
+8%

ASPICE

North America · Intermediate

87%
104/120 controls
+6%

TX-RAMP

Africa · Advanced

88%
60/69 controls
+8%

ICO Codes

Asia-Pacific · Advanced

89%
111/125 controls
-7%

CMA Cyber Saudi

Middle East · Intermediate

92%
139/152 controls
+7%

OpenSAMM

Asia-Pacific · Intermediate

93%
66/72 controls
-7%

TSA Rail Cyber

Asia-Pacific · Advanced

93%
72/78 controls
stable

ETSI EN 303 645 IoT

Latin America · Intermediate

52%
73/142 controls
-2%

NIST 800-82

North America · Advanced

53%
57/109 controls
+2%

Indonesia PDP

Africa · Foundational

54%
30/56 controls
+4%

BSI IT-Grundschutz

Middle East · Foundational

55%
64/117 controls
-2%

K-ISMS

Asia Pacific · Advanced

56%
70/125 controls
+5%

IT-Grundschutz

Europe · Advanced

58%
113/195 controls
-7%

SSAE 18

Middle East · Intermediate

58%
38/67 controls
+5%

CFATS

Middle East · Foundational

58%
22/38 controls
+3%

NCA ECC

Middle East · Intermediate

61%
69/114 controls
+9%

DSL

APAC · Advanced

61%
78/128 controls
-1%

SHERPA

Europe · Foundational

62%
72/117 controls
+7%

COBIT

Global · Intermediate

64%
119/187 controls
+3%

BS 10012

Europe · Intermediate

65%
147/227 controls
+4%

Risk IT

Global · Intermediate

65%
110/170 controls
-3%

NCAR UAE

Latin America · Advanced

65%
82/127 controls
+3%

TOGAF

Global · Advanced

66%
46/70 controls
-4%

201 CMR 17.00

North America · Intermediate

70%
104/149 controls
+8%

Qatar NIA

Europe · Foundational

70%
70/101 controls
+4%

Zachman

Global · Advanced

71%
106/150 controls
+9%

ECB TIBER-EU

Global · Intermediate

71%
105/148 controls
+9%

SANS Top 20

Middle East · Advanced

71%
81/115 controls
+5%

SABSA

Global · Advanced

72%
65/91 controls
+4%

Cyber Resilience Act

Africa · Intermediate

72%
70/98 controls
-5%

Essential Eight

Asia Pacific · Foundational

73%
156/214 controls
+9%

BDSG

Europe · Foundational

74%
148/200 controls
+4%

CMMI

Global · Advanced

75%
69/93 controls
-1%

LGPD

South America · Foundational

75%
144/192 controls
+4%

LGPD

South America · Intermediate

75%
49/66 controls
+8%

ISO 27100

Asia-Pacific · Foundational

75%
98/131 controls
-4%

LFPDPPP

North America · Foundational

76%
68/90 controls
-5%

SOC 2 Lite

Global · Foundational

77%
174/227 controls
-7%

OSFI B-13

North America · Foundational

77%
28/37 controls
+10%

PIPL

APAC · Advanced

78%
58/75 controls
-1%

POPIA

Africa · Intermediate

78%
45/58 controls
+6%

UCPA Utah

Africa · Advanced

79%
26/33 controls
stable

Val IT

Global · Intermediate

81%
170/210 controls
+5%

KCDPA Kentucky

Europe · Foundational

83%
24/30 controls
-9%

NERC CIP-006

North America · Advanced

83%
112/135 controls
+8%

PIPEDA

North America · Foundational

85%
97/115 controls
+6%

Habeas Data

South America · Foundational

85%
156/184 controls
+2%

PIPEDA

North America · Foundational

85%
97/115 controls
+6%

ITIL

Global · Foundational

86%
162/189 controls
+10%

ISO 14001

Latin America · Intermediate

86%
141/164 controls
+9%

StateRAMP

Global · Foundational

86%
134/156 controls
+1%

POPIA

Africa · Foundational

87%
186/214 controls
+9%

ICH Q10

Asia-Pacific · Advanced

87%
45/52 controls
-6%

KVKK

Europe · Intermediate

88%
108/123 controls
-9%

NIST SP 1800-25

North America · Intermediate

88%
143/163 controls
+3%

NY SHIELD

North America · Foundational

89%
59/67 controls
-8%

OCTAVE

Global · Intermediate

92%
135/147 controls
+10%

ACSC Essential 8

Europe · Intermediate

92%
141/154 controls
+10%

VDA ISA

Europe · Advanced

92%
128/140 controls
+8%

NIST SP 800-145

Latin America · Foundational

92%
57/63 controls
-7%

ISO 27017

Global · Advanced

93%
73/79 controls
-5%

FERPA

Asia-Pacific · Intermediate

93%
144/155 controls
+3%

SOC 2

Global · Foundational

94%
205/219 controls
-6%

APPI

APAC · Foundational

94%
205/219 controls
+4%

Executive Summary

Strengths

  • 155 frameworks fully compliant (≥85%), representing 26% of tracked frameworks
  • 292 frameworks showing improving trends, indicating positive security momentum
  • 56,583 of 76,297 total controls passing (74%)

Areas of Concern

  • 24 frameworks non-compliant (<55%), requiring immediate remediation
  • 197 frameworks at risk (55-69%), needing accelerated compliance programs
  • 275 frameworks showing declining trends, requiring root cause analysis

Automate Your Compliance Scorecard

Replace manual spreadsheet tracking with real-time, automated compliance monitoring across all 599 frameworks. Powered by Ayurak AI.

Schedule a Demo