Skip to main content

Framework Guidance

Framework-specific requirements, FAQs, and evidence guidance for SOC 2, ISO, HIPAA, PCI, GDPR, and more.

1 author20 articles
California Consumer Privacy Act (CCPA)
HIPAA examination
HIPAA Training requirements
Government clouds (GCC High, GovCloud): what changes, common blockers, and what to collect for Support
General Data Protection Regulation (GDPR)
SOC 2 Trust Service Criteria
SOC 2 Overview
SOC 2 Processing Integrity
SOC 2 Type 2 Audit Review Period Items
Understanding the Scope of HIPAA
Understanding PCI DSS Compliance
FAQs: SOC 2 compliance documentation and evidence in Secureframe
FAQs: NYDFS (23 NYCRR 500): scope, Class A, and customer documentation
FAQs: Privacy regulations: GDPR, CCPA, cookies, and data subject requests
FAQs: Encryption and key management: data at rest, in transit, and controls
FAQs: PCI DSS: scope, evidence, and common scenarios
FAQs: SOC 2: audits, trust services criteria, and common scenarios
FAQs: FedRAMP, CMMC, and DFARS: readiness, scope, and evidence
FAQs: ISO 27001: requirements, evidence, and common scenarios
FAQs: HIPAA: requirements, evidence, and common scenarios