Any framework. Your anchor.
Pick the framework your program is built around. TruOps maps everything else to it, requirement by requirement, and clearly marks where coverage is only partial.
- You already run this in a spreadsheet, a SOC 2 automation tool, or an enterprise GRC suite
- Your next customer or regulator wants a second framework and you can't reuse the work
- You need dated, sourced coverage that shows partial overlaps clearly
Security & privacy
AICPA Trust Services Criteria: Type I and Type II readiness.
→FrameworksISO 27001ISO/IEC 27001:2022 ISMS and the 93 Annex A controls.
→FrameworksNIST CSF 2.0Govern, Identify, Protect, Detect, Respond, Recover, with maturity scoring.
→FrameworksCIS Controls18 prioritized safeguards with implementation groups.
→FrameworksGDPREU data protection: records, DPIAs, processors, and breach notification.
→FrameworksPCI DSS 4.0The 12 requirements for protecting cardholder data.
→Sector & regional
Security Rule risk analysis for covered entities and business associates.
→FrameworksHITRUSTThe certifiable framework common in healthcare.
→FrameworksDORAEU digital operational resilience for financial entities.
→FrameworksNIS2EU cybersecurity obligations for essential and important entities.
→FrameworksSOX ITGCIT general controls for financial reporting.
→Questions
Which compliance frameworks does TruOps support?
18 built in: ISO 27001, SOC 2, NIST CSF 2.0, HIPAA, PCI DSS, NIST SP 800-53, NIST SP 800-171, CMMC 2.0, HITRUST, DORA, NIS2, NIST AI RMF, ISO/IEC 42001, GDPR, SOX ITGC, CIS Controls, SCF, and UCF, plus any framework or internal standard you upload.
Do I have to use SCF?
No. You choose your anchor framework. SCF and UCF are optional.
Can I switch from another GRC or SOC 2 tool?
Yes. Upload the reports, workbooks, and exports you already have and TruOps sets up the program from them for you to review.
See it run on your own data.
Book 30 minutes with a GRC specialist. Bring a real document, like a SOC 2 report, risk register, or vendor list (redacted is fine), and we'll show TruOps AI working on it.