9 frameworks
Banking, fintech & payments
Card data, financial reporting controls and operational resilience, for banks, payment companies, fintechs and the vendors that serve them.
Most asked for
Often added
IndustriesThe frameworks your industry
The frameworks your industry
is actually asked for.
Every sector answers to different regulators, customers and auditors. Pick yours to see which frameworks come first and which usually follow, all on one control library, so the work you do for one framework counts towards the next.
- 10
- industries
- 48
- built-in frameworks
- 1
- control library
Frameworks by industry
Most asked for are the frameworks teams in the sector usually start with. Often added are the ones that tend to follow as customers, markets and auditors change.
6 frameworks
Capital markets & GIFT City (IFSC)
Entities licensed by IFSCA, including stock exchanges, clearing corporations and depositories, with cyber resilience controls alongside ISO 27001.
Most asked for
Often added
7 frameworks
Healthcare & health-tech
Providers, health plans and the software vendors that handle patient data for them, protecting PHI and proving it to hospital security reviews.
Most asked for
Often added
9 frameworks
SaaS & cloud providers
The frameworks enterprise buyers ask for before they sign, plus cloud-specific controls and the privacy laws of the markets you sell into.
Most asked for
Often added
6 frameworks
AI companies
Teams that build, fine-tune or deploy AI, showing that each AI system is inventoried, risk-assessed and governed.
Most asked for
Often added
8 frameworks
IT services & outsourcing
Managed service providers, IT outsourcing and BPO firms that run systems and data for clients, often under several client contracts at once.
Most asked for
Often added
6 frameworks
US government contractors
Companies that handle controlled unclassified information or sell cloud services to US federal agencies and the defence supply chain.
Most asked for
Often added
7 frameworks
Gulf government & regulated entities
Government bodies, critical sectors and their suppliers in Saudi Arabia and the UAE, under national cyber security and data protection rules.
Most asked for
Often added
7 frameworks
Manufacturing & automotive
Plants and suppliers securing industrial control systems, sharing data with automotive OEMs, and running quality, safety and environmental systems.
Most asked for
Often added
7 frameworks
Energy & critical infrastructure
Operators of essential services such as energy, transport and utilities, where security incidents are also continuity and safety incidents.
Most asked for
Often added
Whatever your industry
Two lists apply almost everywhere: a security baseline, and the privacy law of each place your customers live.
The security baseline
The frameworks most organisations build on first. Get these right and most sector frameworks become an extension rather than a new project.
Privacy laws by where your customers are
Privacy laws follow the people whose data you hold, not your sector or where your team sits.
- European UnionGDPR →
- United KingdomUK GDPR →
- IndiaDPDP Act →
- California, USCCPA →
- BrazilLGPD →
- United Arab EmiratesUAE PDPL →
Collect evidence once, use it for every framework
Most industries need more than one framework. On the Bitkosh Readiness Platform, every framework maps to the same control library, so one piece of evidence can serve several frameworks at once.
- One control library mapped across all 48 built-in frameworks
- Evidence reused instead of collected again for each audit
- A new framework starts from the controls you already run
- A readiness score per framework, so you know where each one stands
Example control
Multi-factor authentication for all users
One configuration screenshot and one access review, counted towards:
Questions about industry coverage
Which industries do you support?
Any organisation can use the Bitkosh Readiness Platform. This page groups the 48 built-in frameworks by the sectors we are asked about most; if your sector is not listed, the baseline frameworks and the privacy laws of your markets are the usual starting point.
Do we need a separate programme for each framework?
No. Controls and evidence live in one library and are mapped across frameworks, so a policy, an access review or a backup test you have already done counts again for the next framework. Each framework still has its own gap assessment and readiness score.
Our regulator or customer uses a framework that is not listed. What then?
You can build your own framework on the platform from your regulator’s or customer’s requirements and map it to the controls you already have. Tell us which one it is and we will tell you how much of it your existing controls already cover.
Does Bitkosh issue certificates or audit reports?
No. Certificates and attestation reports come from accredited certification bodies and licensed audit firms. We get you ready for them, with a gap assessment, implementation support and evidence that holds up in the audit.
See the frameworks for your industry on the platform
In a 30-minute call we show the Bitkosh Readiness Platform with your sector’s frameworks, or you can check your readiness yourself first.