Explore Netra frameworks
Find the framework relevant to your organisation and see how Netra connects requirements, tasks, evidence and audit work.
Browse the framework library
Search by name or filter by category and region.
Showing all frameworks
ISO 27001:2022 (Security Controls)
This Netra entry covers the security-control side of ISO/IEC 27001:2022.
View frameworkSOC 2
SOC 2 is an independent CPA attestation over controls relevant to selected Trust Services Criteria.
View frameworkNIST CSF 1.1
NIST CSF 1.1 is a voluntary, outcome-based cybersecurity framework organised around Identify, Protect, Detect, Respond and Recover.
View frameworkNIST CSF 2.0
NIST CSF 2.0 helps organisations communicate and manage cybersecurity risk.
View frameworkNIST SP 800-53
NIST SP 800-53 Revision 5 is a broad catalogue of security and privacy controls for information systems and organisations.
View frameworkNIST SP 800-171
NIST SP 800-171 Revision 3 addresses the confidentiality of Controlled Unclassified Information in nonfederal systems and organisations.
View frameworkPCI DSS 4.0.1
PCI DSS provides security requirements for environments that store, process or transmit payment account data and systems that can affect their security.
View frameworkPCI-DSS
PCI DSS provides a baseline for protecting payment account data.
View frameworkGDPR
The EU General Data Protection Regulation governs personal-data processing within its territorial scope.
View frameworkHIPAA Security
The HIPAA Security Rule applies to covered entities and business associates handling ePHI.
View frameworkEU AI ACT 2024
The EU AI Act regulates AI through a role- and risk-based approach.
View frameworkISO 42001:2023
ISO/IEC 42001:2023 specifies requirements for an artificial intelligence management system.
View frameworkNIST AI RMF 1.0
NIST AI RMF 1.0 is a voluntary framework for managing risks associated with AI systems.
View frameworkCCPA
The California Consumer Privacy Act, as amended by the CPRA, gives California residents rights over their personal information.
View frameworkCIS v8
CIS Controls v8 provides prioritised safeguards to address common attacks.
View frameworkCIS v8.1
CIS Controls v8.1 updates v8 through clearer descriptions, asset-class revisions and alignment with NIST CSF 2.0, including its Govern function.
View frameworkCyber Essentials
Cyber Essentials is a UK government-backed scheme focused on protection against common internet-based attacks.
View frameworkCyber Essentials v3.2
Cyber Essentials v3.2 is an earlier technical requirements edition.
View frameworkDORA
The Digital Operational Resilience Act applies to covered EU financial entities and establishes an oversight framework for designated critical ICT third-party providers.
View frameworkFTC Safeguard Rule
The FTC Safeguards Rule applies to financial institutions within the FTC’s jurisdiction, a category broader than banks in everyday language.
View frameworkHITRUST
HITRUST CSF provides a harmonised basis for security assurance.
View frameworkNCSC CAF v3.2
The NCSC Cyber Assessment Framework supports assessment of cyber resilience for organisations delivering important or essential functions.
View frameworkNIS 2
NIS2 sets an EU-wide basis for cybersecurity risk management and reporting across specified sectors.
View frameworkNIST-SSDF
The NIST Secure Software Development Framework in SP 800-218 describes practices that can be integrated into a software development lifecycle.
View frameworkSEC
The SEC’s public-company cybersecurity disclosure rules address material incidents and annual disclosures about risk management, strategy and governance.
View frameworkRBI CTRRAF 2026 - Commercial Banks
Netra includes a commercial-bank entry for RBI’s Cybersecurity, Technology: Risk, Resilience and Assurance Framework Directions, 2026.
View frameworkRBI CTRRAF 2026 - Small Finance Banks
Netra includes a dedicated RBI CTRRAF 2026 entry for Small Finance Banks.
View frameworkRBI CTRRAF 2026 - Payments Banks
Netra includes an RBI CTRRAF 2026 entry specifically for Payments Banks.
View frameworkRBI CTRRAF 2026 - All India Financial Institutions
Netra lists an RBI CTRRAF 2026 entry for All India Financial Institutions.
View frameworkRBI CTRRAF 2026 - Credit Information Companies
Netra includes an RBI CTRRAF 2026 entry for Credit Information Companies.
View frameworkRBI CTRRAF 2026 - Urban Co-operative Banks
Netra’s UCB entry addresses the RBI CTRRAF Directions for Urban Co-operative Banks.
View frameworkRBI CTRRAF 2026 - Non-Banking Financial Companies
Netra includes an RBI CTRRAF 2026 entry for Non-Banking Financial Companies.
View frameworkNISPG 2019 v5.0
India’s National Information Security Policy and Guidelines concerns protection of information handled by government and public-sector organisations and associated entities.
View frameworkCERT-IN Guidelines
The CERT-IN cyber-security directions of 28 April 2022 address specified entities, including service providers, intermediaries, data centres, bodies corporate and government organisations.
View frameworkISO 27701:2019
ISO/IEC 27701:2019 extended ISO/IEC 27001 and ISO/IEC 27002 for privacy information management, addressing PII controllers and processors.
View frameworkISO 27001:2022 (Requirements)
ISO/IEC 27001:2022 sets requirements for an information security management system.
View frameworkMeitY CSA (Comprehensive Security Audit)
The Checklist for Comprehensive Security Audit (CSA) is a VAPT checklist document for the audit of important government applications and databases, dated 27 March 2024.
View frameworkNot sure which frameworks apply to you?
Answer two questions about your industry and where you operate, and we will suggest the frameworks most likely to be relevant.
See your frameworks in Netra
See how Netra connects your framework requirements with tasks, evidence and audit follow-up.