Global standards, one
record behind them
ISO 27001, ISO 27701, ISO 42001, SOC 2, PCI DSS and the CIS Controls apply across borders. Netra holds them with the regional frameworks so shared work is counted once.
Global · one control, credited everywhere
Review user access every quarter
In progress · Owner: Head of IT
Credited to
- ISO 27001:2022
- SOC 2
- PCI DSS v4.0.1
- CIS Controls v8.1
- ISO 27701:2019
Illustration of how work is credited. Not client data.
- ISO family
- 27001, 27701 and 42001
- SOC 2 and PCI DSS
- Common customer asks
- CIS Controls
- v8 and v8.1 listed separately
- 50+ in all
- Across regions
The situation
What cross-border organisations are asked for
Customers ask for the same standards everywhere.
ISO 27001
Certification for security management.
ISO 27701
Privacy management.
ISO 42001
AI management systems.
SOC 2
Service organisation controls.
PCI DSS
Payments.
CIS Controls
Prioritised safeguards.
The difference
Same standards, no repeat work
One record under every regional demand.
The usual way
- A project per standard
- Evidence duplicated
- No common view
In Netra
- Shared controls across standards
- Evidence credited once
- Status per framework together
From one standard to the next
Each addition starts ahead.
- 1
Start with ISO 27001
Or SOC 2.
- 2
Add standards
ISO 27701, PCI DSS, CIS.
- 3
Run the work
Owners and recurrence.
- 4
Audit
Certification and assurance.
- 5
Report
To customers and leadership.
Quiet audits. Loud confidence.
Certification bodies and auditors receive evidence already mapped to controls, with accepted evidence fingerprinted in the vault.
See the Audit CentreOutcomes
What changes
Fewer projects, more reuse.
Shared work
Credit across standards.
Faster next standard
Starts ahead.
Clear status
Per standard.
Frameworks
Global standards in the library
Each opens a page on what it covers.
In the platform
The modules behind this page
Every module works on the same record, so a task done once is counted wherever it applies.
Compliance Centre
Status for every framework, derived from the work.
Task Engine
Every requirement as an owned task with evidence.
Audit Centre
Internal, external, certification and regulatory audits end to end.
Risk Manager
A register where residual risk falls as work is done.
Third-Party Risk
Vendors discovered, assessed and reported to the board.
Dashboard and Reports
A live posture score and one-click board reports.
The detail: reporting, engagement and what to prepare
Questions we are asked
Why are some versions listed twice?
Each framework version is listed separately, as it is loaded in Netra, for example CIS Controls v8 and v8.1.
Can one task serve several standards?
Where the controls overlap, yes.
Where do I find all 50+?
The Framework Library lists them, with a Framework Selector.
See Netra for Global standards
A demo built around your frameworks and your kind of organisation, not a generic tour.