Security governance
Risk assessment, policy, control guidance and audit preparation.
Explore the practiceCYBERSECURITY, RISK & COMPLIANCE
Security and audit readiness across markets.
Connect technology risk, control implementation and audit preparation. Explore international standards and regulatory references in the context of your organization.
EXPLORE A FRAMEWORK
Connect the standard to the work.
01Scope→
02Controls→
03Evidence→
04Remediation→
05Review
ISO 27001
Information security management
Risk treatment, policies, control ownership and review records.
Framework applicability and independent assessor responsibilities are established during scoping.
Information security & testing
Security architecture, scoped authorized testing and actionable findings.
Explore the practicePrivacy & data protection
Explore obligations, information flows and proposed privacy scope.
Explore the practiceCloud & operational resilience
Connect infrastructure, cloud, support and recovery planning.
Explore the practiceAI governance & risk
Scope responsible AI adoption, data foundations and human oversight.
Explore the practiceSpecialist assurance scope
Explore threat monitoring, incident readiness and supplier risk; agree the engagement scope.
Explore the practiceGLOBAL FRAMEWORK LANDSCAPE
Find your compliance starting point.
Explore security, privacy, resilience, AI and sector-specific references across international markets.
FRAMEWORK EXPLORER
84 matching references · 84 in the planning catalog
CMMI
Process maturity model and appraisal framework
- Relevant context
- Technology, services and product organizations
- Planning capability
- Process Excellence / CMMI Readiness
Lean Six Sigma & DMAIC
Process-improvement methodology (not a regulatory certification)
- Relevant context
- Operations, quality and service delivery
- Planning capability
- Process Excellence / Training
ISO/IEC 27001
Certifiable management system
- Relevant context
- Cross-sector
- Planning capability
- GRC / ISMS
SOC 2 Type II
Independent CPA attestation report
- Relevant context
- Technology / SaaS
- Planning capability
- SOC2 Readiness
HIPAA / HITECH
Statute and regulations (no HHS certificate)
- Relevant context
- Healthcare
- Planning capability
- HIPAA Risk / Privacy
PCI DSS 4.0.1
Payment card security standard
- Relevant context
- Cardholder data
- Planning capability
- PCI Readiness
Scope & gapsControls & remediationEvidence & audit readiness
This catalog is a planning reference, not a determination of regulatory applicability or a confirmed list of framework-specific services. Scope is subject to qualified review. Independent certification, attestation and authorized assessments require the relevant qualified bodies.
Discuss your audit & compliance prioritiesKNOW THE DIFFERENCE
Readiness support and independent assurance have different roles.
- Consulting & implementation
- Risk and gap assessment, control guidance, remediation planning and agreed technical work.
- Audit readiness & support
- Organizing evidence, preparing teams and clarifying unresolved gaps for a defined scope.
- Independent certification or attestation
- Separate qualified bodies issue certifications, attestations or authorized assessments where required. No PrimisPro accreditation or assessor status is claimed.
STRATEGIC PARTNERSHIPS
Connecting expertise with the assurance ecosystem.
PrimisPro is a member of BSI’s Associate Consultant Programme. This relationship supports our consulting ecosystem for ISO/IEC 27001, ISO/IEC 27701, ISO 9001 and PCI DSS readiness. Our consulting role remains distinct from independent certification and assessment.
Discuss strategic partnerships ↗PrimisPro
WORK WITH PRIMISPRO
Define your audit or compliance priorities.
Bring your business priorities, current environment and the scope you want to explore.
