Frameworks
Do the work once. Count it toward every framework.
Wardline's library of 81 common controls is mapped to six frameworks. Pick one to see its control families, then compare it with a second to see what you'd already have done.
Framework explorer
SOC 2
- Who issues it
- Typical prep
- Wardline controls
- 61 across 15 control families
Controls by family
Mapped controls out of the family's total in the library.
Cross-mapping
| ID | Control |
|---|
Overlap at a glance
Shared controls between every pair
Each cell counts the Wardline controls that serve both frameworks. The diagonal is each framework's total. Select a number to compare that pair.
Plain answers
Who gives you what, and for how long
Wardline gets you ready and keeps you ready. It never issues a report or certificate, and a vendor that says it does is worth a second look.
| Framework | What you get | From | Renewal |
|---|---|---|---|
| SOC 2 | Type I or Type II attestation report | A licensed CPA firm | Usually every 12 months |
| ISO 27001 | Certificate | An accredited certification body | 3 years, surveillance audits yearly |
| HIPAA | Risk analysis and documented safeguards | You, often with an independent assessor | Review at least yearly |
| GDPR | Records that show compliance | You; supervisory authorities enforce | Ongoing |
| PCI DSS | Report on Compliance or Self-Assessment Questionnaire | A Qualified Security Assessor, or you | Every 12 months |
| NIST CSF | Current and target profiles | You, or an outside reviewer | Voluntary |
General information, not legal advice. Your auditor and counsel decide what applies to you.
Not sure which framework your buyers need?
The readiness assessment suggests a timeline for any of them.