AI Act · DORA · ESG · GCP · GDPR · GMP · IEC 61850 · IEC 62443 · ISO 14001 · ISO 20000 · ISO 22301 · ISO 27001 · ISO 31000 · ISO 50001 · ISO 9001 · NERC CIP · NIS2 · NIST CSF · SOC2

GDPR

GDPR - General Data Protection Regulation (EU 2016/679)
Date of Effect: 2018-05-25
Self-assessment Audit Review CertificationPreparation In-Depth 10 - 15 Min. Optional Groups: 2 Sections: 9 46 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Get a fast, documentable overview of your GDPR compliance. The report combines targeted measuring points, key risk areas, and a prioritized action plan, ready for management or audit. Suitable for DPOs, IT leadership, and internal auditors.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

DORA

DORA - Digital Operational Resilience Act (EU 2022/2554)
Date of Effect: 2025-01-17
Self-assessment Audit Review CertificationPreparation In-Depth 10 - 15 Min. Optional Groups: 3 Sections: 5 45 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Assess your organization’s digital resilience according to DORA. The report provides concrete measuring points, identifies risk areas, and delivers actionable recommendations for IT security and operational resilience. Ideal for CIOs, risk managers, and compliance teams.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

NIS2

NIS2 - Directive on Security of Network and Information Systems 2 (EU 2022/2555)
Date of Effect: 2024-10-16
Self-assessment Audit Review CertificationPreparation In-Depth 3 - 28 Min. Optional Groups: 10 Sections: 6 85 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Ensure your organization meets NIS2 requirements. The report gives an overview of critical networks and information security processes, highlights risk areas, and suggests prioritized actions. Suitable for CISOs, IT leadership, and internal audits.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

ESG

ESG / CSRD – Corporate Sustainability Reporting Directive (EU 2022/2464) + ESRS Standards
Date of Effect: Applies for FY2024 reporting (large EU companies >500 employees) – expanding 2025–2026
Self-assessment Audit Review CertificationPreparation In-Depth 2 - 25 Min. Optional Groups: 5 Sections: 17 75 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Evaluate your ESG performance across environment, social, and governance dimensions. The report provides measurable indicators, identifies areas for improvement, and delivers an action plan that can be shared with management or investors. Ideal for ESG managers and leadership teams.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

ISO 27001

ISO/IEC 27001 – Information Security Management Systems (ISMS) Standard
Date of Effect: First published 2005; latest revision 2022
Self-assessment Audit Review CertificationPreparation In-Depth 6 - 38 Min. Optional Groups: 4 Sections: 21 114 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Get an overview of information security according to the ISO 27001 standard. The report shows scores for critical controls, risk areas, and recommended measures for compliance and certification. Suitable for CISOs, internal auditors, and IT leaders.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

ISO 22301

ISO 22301 – Business Continuity Management Systems (BCMS).
Date of Effect: Published 2019 (replaces ISO 22301:2012).
Self-assessment Audit Review CertificationPreparation In-Depth 28 - 33 Min. Optional Groups: 6 Sections: 7 100 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Evaluate your organization’s business continuity and disaster recovery capabilities according to ISO 22301 standards. The report highlights potential vulnerabilities, tests continuity plans, and provides practical guidance to strengthen operational resilience. Ideal for risk managers, IT leaders, and operational continuity teams.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

AI Act

AI Act – European Union Artificial Intelligence Act (EU Proposal 2021/0106).
Date of Effect: Enforcement 2025 – 2026 for high-risk AI systems in EU.
Self-assessment Audit Review CertificationPreparation In-Depth 6 - 23 Min. Optional Groups: 6 Sections: 8 70 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Assess your organization’s AI compliance according to the EU AI Act. The report provides concrete assessment points, identifies risk areas, and delivers actionable recommendations for AI governance, data management, and system oversight. Ideal for CIOs, AI managers, and compliance teams.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

SOC2

SOC 2 – Service Organization Control 2, based on AICPA Trust Services Criteria
Date of Effect: Issued in 2017 based on the AICPA Trust Services Criteria, and updated with revised points of focus in 2022.
Self-assessment Audit Review CertificationPreparation In-Depth 23 - 40 Min. Optional Groups: 4 Sections: 5 120 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Gain insight into your organization’s internal controls for data protection and information security. The report highlights critical controls, risk areas, and action recommendations to achieve or document SOC2 compliance. Ideal for IT leadership and compliance teams.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

IEC 62443

IEC 62443 – Industrial communication networks – Network and system security for industrial automation and control systems.
Date of Effect: Ongoing compliance; first edition published 2007, with updates in subsequent parts (2013–2022).
Self-assessment Audit Review CertificationPreparation In-Depth 28 - 36 Min. Optional Groups: 5 Sections: 15 110 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Evaluate security and maturity in industrial control systems according to IEC 62443. The report highlights critical controls, identifies risks, and provides recommendations for improvement. Suitable for OT security teams, CISOs, and compliance officers.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

NIST CSF

1.1
NIST Cybersecurity Framework (CSF), issued by NIST
Date of Effect: First published 2014, updated 2018; applicable across industries
Self-assessment Audit Review CertificationPreparation In-Depth 19 - 33 Min. Optional Groups: 4 Sections: 5 100 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Assess your organization’s cybersecurity posture using the NIST CSF framework. The report evaluates your ability to identify, protect, detect, respond to, and recover from cyber threats, providing actionable recommendations for improving security and resilience. Ideal for CISOs, IT managers, and compliance teams.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

GMP

EU/EudraLex Vol.4
Good Manufacturing Practice (GMP), EU and WHO guidelines. USA: FDA Current Good Manufacturing Practice (cGMP) regulations. Mandatory for EU pharmaceutical manufacturers; updated continuously. GMP generally required for manufacture of regulated medicinal products in all countries.
Date of Effect: EU GMP / EudraLex Vol.4: currently in force, latest updates 2017/1572 and Annex 1 (2023), US cGMP (FDA): since 1978 (21 CFR 210–211), WHO GMP: since 1969 (internationally recommended)
Self-assessment Audit Review CertificationPreparation In-Depth 21 - 33 Min. Optional Groups: 4 Sections: 7 100 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Assess your manufacturing processes against GMP requirements. The report identifies potential quality risks, evaluates procedural compliance, and provides actionable recommendations to ensure consistent production and patient safety. Ideal for quality managers, production leads, and regulatory teams.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

GCP

ICH E6(R2)
Good Clinical Practice (GCP), ICH and EU Directive 2001/20/EC. USA: FDA-regulated clinical trials must follow ICH-GCP and FDA regulations (21 CFR Parts 50, 56, 312). GCP generally required for regulated clinical trials in all countries.
Date of Effect: EU Annex 1/ICH E6 (R3) from 2022, EU since 1997 (Directive 2001/20/EC), US FDA ICH E6 (R2) incorporated into regulations from 2017, US since 1997 (FDA regulations, 21 CFR Parts 50/56/312).
Self-assessment Audit Review CertificationPreparation In-Depth 25 - 33 Min. Optional Groups: 4 Sections: 7 100 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Assess your organization’s clinical trial processes according to GCP standards. The report evaluates compliance with ethical, regulatory, and data integrity requirements, highlighting risks and providing actionable recommendations for clinical operations and quality teams. Ideal for clinical managers, investigators, and regulatory compliance officers.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

NERC CIP

NERC CIP – North American Electric Reliability Corporation Critical Infrastructure Protection standards.
Date of Effect: CIP Version 5, 2013.
Self-assessment Audit Review CertificationPreparation In-Depth 18 - 30 Min. Optional Groups: 4 Sections: 8 90 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Assess your organization’s compliance with NERC CIP standards for critical infrastructure protection. The report provides detailed assessment points, identifies risk areas, and delivers actionable recommendations for cybersecurity, access control, system monitoring, and incident response. Ideal for CIOs, IT security managers, and compliance teams.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

ISO 31000

ISO 31000 – Risk Management Guidelines.
Date of Effect: Published 2018 (revises ISO 31000:2009).
Self-assessment Audit Review CertificationPreparation In-Depth 23 - 33 Min. Optional Groups: 5 Sections: 5 101 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Assess your organization’s risk management framework with ISO 31000 guidelines. The report identifies key risks, evaluates mitigation strategies, and recommends improvements to integrate risk management across processes. Suitable for compliance officers, risk managers, and executive leadership.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

ISO 14001

ISO 14001 – Environmental Management Systems (EMS).
Date of Effect: Latest revision ISO 14001:2015.
Self-assessment Audit Review CertificationPreparation In-Depth 21 - 34 Min. Optional Groups: 5 Sections: 7 104 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Assess your organization’s environmental management system against ISO 14001 standards. The report identifies opportunities for sustainability, evaluates environmental risks, and provides guidance for improving ESG performance. Suitable for sustainability officers, compliance teams, and operational managers.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

ISO 9001

ISO 9001 – Quality Management Systems
Date of Effect: Latest revision 2015
Self-assessment Audit Review CertificationPreparation In-Depth 17 - 34 Min. Optional Groups: 4 Sections: 7 103 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Assess your organization’s quality management system (QMS) according to ISO 9001 requirements. The report provides evaluation points, identifies areas for improvement, and delivers actionable recommendations for process management, quality control, and continuous improvement. Ideal for quality managers, operations leaders, and auditors.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

ISO 20000

ISO/IEC 20000 – International Standard for IT Service Management.
Date of Effect: Latest revision (ISO/IEC 20000-1:2018).
Self-assessment Audit Review CertificationPreparation In-Depth 10 - 17 Min. Optional Groups: 5 Sections: 5 51 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Evaluate your organization’s IT service management capabilities in line with ISO 20000 standards. The report reviews service delivery, control processes, and continuous improvement practices to optimize IT operations. Ideal for IT managers, service delivery leads, and process owners.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

ISO 50001

ISO 50001:2018 – Energy management systems – Requirements with guidance for use
Date of Effect: Published 2018 – valid until revised
Self-assessment Audit Review CertificationPreparation In-Depth 8 - 11 Min. Optional Groups: 6 Sections: 7 35 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Assess your organization’s compliance with ISO 50001 Energy Management Systems. The report evaluates energy performance management, governance, operational controls, and continual improvement practices, and provides concrete findings and recommendations to support certification and sustained energy efficiency.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview

IEC 61850

IEC 61850 – Communication networks and systems for power utility automation
Date of Effect: Edition 2, 2013 (latest edition)
Self-assessment Audit Review CertificationPreparation In-Depth 28 - 38 Min. Optional Groups: 4 Sections: 7 114 Measurement Points Glossary Help Section/Topic Scoring Criticality Scoring PDF Report Top Risks Track Progress Recommendations

Assess your organization’s compliance with the IEC 61850 standard for communication networks and systems in substations. The report provides assessment points, identifies gaps, and delivers actionable recommendations for system design, interoperability, configuration, and operational management. Ideal for CIOs, substation engineers, and compliance teams.

Customizable Levels – Choose the depth of insight that suits your needs:
Core – Focus on the essentials
Optional – Expand insight as needed
In-Depth – Get a full overview and detailed analysis

Select Report » Preview