Every framework your auditor will ask about.

Digital Operational Resilience Act — mandatory for banks, insurance, and financial market infrastructures in the EU.

The global standard for information security management. Required by enterprise customers and increasingly by regulators.

Trust Services Criteria audit — required by US enterprise customers and increasingly demanded across Europe.

EU Network and Information Security directive — expanded scope covering more sectors than NIS1, stricter penalties.

General Data Protection Regulation — the global benchmark for data privacy, enforced across all EU member states.

Central Securities Depositories Regulation — settlement discipline, buy-in procedures, and internalized settlement reporting for financial market infrastructure.

Corporate Sustainability Reporting Directive — double materiality assessment, ESRS reporting, Scope 3 emissions, and supply chain ESG data.