Skip to content
Frameworks

One set of controls, mapped to the frameworks you answer to.

KashiGuard keeps a common control framework. Each control maps to framework requirements, so evidence and tests for one control count wherever it applies.

In the platform

What ships with KashiGuard

01

Digital Personal Data Protection Act, 2023

with the DPDP Rules, 2025

Requirements mapped to common controls, with audit controls and tests ready to use in an engagement.

02

ISO/IEC 27001

Annex A

Annex A controls mapped to common controls, usable in internal and external audits.

03

Your own framework

SOC 2, GDPR, PCI DSS, internal standards…

Import controls, tests and policies by CSV and map them to the common controls.

Explorer

Every framework, mapped once.

Search, filter and expand any framework.

India’s data protection law and the DPDP Rules, 2025: notice and consent, purpose limitation, data principal rights, breach intimation and obligations for significant data fiduciaries.

Notice & consentData principal rightsBreach intimationProcessorsRetention
Mapped to KashiGuard common controlsDetails →

International standard for an information security management system, from scoping and risk treatment to the certification audit.

Access controlAsset managementSupplier relationsIncident management
Mapped to KashiGuard common controlsDetails →

Trust services report that proves your security, availability and confidentiality controls to customers.

SecurityAvailabilityConfidentialityChange management
Import by CSV · consulting supportDetails →

Rules for processing personal data of EU residents, including lawful basis, subject rights and breach notification.

Data mappingConsentSubject rightsBreach response
Import by CSV · consulting supportDetails →

Safeguards for protected health information across administrative, physical and technical controls.

Privacy ruleSecurity ruleBreach notificationBusiness associates
Import by CSV · consulting supportDetails →

Requirements for any organisation that stores, processes or transmits cardholder data.

Network securityCardholder dataVulnerability managementMonitoring
Import by CSV · consulting supportDetails →

Outcome-based framework to identify, protect, detect, respond and recover.

IdentifyProtectDetectRespondRecover
Import by CSV · consulting supportDetails →

Governance framework that aligns IT with business goals and risk appetite.

GovernanceAlignmentRiskPerformance
Import by CSV · consulting supportDetails →

Compliance framework table

Coverage is sample data from the live demo. Sort by any column and filter by availability.

Framework ↑In KashiGuardSample coverageType
COBITImport
80%
Governance
DPDP ActBuilt in
92%
Privacy
GDPRImport
91%
Privacy
HIPAAImport
84%
Industry
ISO 27001Built in
95%
Security
NISTImport
86%
Security
PCI DSSImport
78%
Industry
SOC 2Import
88%
Security
Showing 1-8 of 8

Ready to Strengthen Your GRC Strategy?

Partner with experts who help businesses stay secure, compliant, resilient, and audit-ready.