Information Security
Anchored on ISO/IEC 27001 · Incorporates ISO/IEC 27002, NIST CSF 2.0, SOC 2 (AICPA TSC), CIS Controls, PCI DSS, ISO/IEC 27017, ISO/IEC 27018
Unified security controls: one control set on ISO/IEC 27001 that also serves NIST CSF, SOC 2, CIS Controls and PCI DSS, so a single programme serves every audit.
The standard tells you what is required; this framework tells you how to do it, whether you've done enough to certify, and how to keep getting better.
Two editions
Both editions come from the same framework and the same version. Professional adds what you need to implement it.
For a team that wants the structure and will run it itself.
- The framework workbook: Principles → Capabilities → Requirements → Controls, with implementation guidance on every control
- Maturity criteria 0–5 and a certification threshold on every control
- The framework as a designed PDF, and a two-page summary
- Source mapping and a clause-coverage map for every certification profile
- README, changelog and the Organisation Licence
For a team implementing the framework, or loading it into APEX.
- Everything in Core
- Governance Playbook (PDF and Word): how to run the framework as a programme, with suggested RACI and delivery waves
- Risk Library, linked to the controls that treat each risk
- Cross-framework mapping
- Templates: policy, assessment questionnaire, evidence register, RACI matrix and programme charter
- APEX import file, to load the framework into the APEX Governance Platform
A free sample, the summary and the first capability, will be here when the framework is published. The Professional edition includes the APEX import file, so the framework loads straight into the APEX Governance Platform. Framework purchases made within 12 months are credited in full against your first year of APEX Business or Enterprise.
Standards
- Primary standard
Standards are referenced by clause, not reproduced. Every standard we trace.
Profiles
Each profile is one standard's view of Information Security: its clauses, coverage and certification view.
- ISO/IEC 27001 Information Security
- SOC 2 Readiness
- NIST Cybersecurity Framework
- Cloud Security & Privacy
Related frameworks
Questions about Information Security?
Tell us what you need to govern and we'll point you to the right framework and edition.
EnquireStandards are referenced by clause, not reproduced. Names of standards and laws are trademarks of their owners; DP Frameworks is not affiliated with or endorsed by any standards body or regulator. Frameworks support governance and readiness; they are not legal advice or a regulatory submission.