48 built-in frameworks. One platform.
GRC Frameworks in the Bitkosh Readiness Platform — 48 built-in, plus build your own: 48 frameworks · 4,346 controls ready today, with gap assessments, cross-framework mapping and evidence collection. 48 of them are listed below. Pick a framework to see how readiness works for it.
Shared controls, cross-mapped automatically
Most frameworks overlap. Bitkosh maintains intelligent crosswalks so a single piece of evidence — say, an access-review control — satisfies the equivalent requirement in every framework at once. Do the work once; stay audit-ready everywhere.
Quarterly User Access Review
Automated recertification of privileged roles, dormant account revocation & least privilege enforcement.
Access rights provisioned, reviewed and revoked
Logical access permissions validated quarterly
Identities and credentials for authorized users, services and hardware are managed
Access control — limit ePHI access to authorized persons and programs
Ongoing confidentiality, integrity, availability and resilience of processing systems
User accounts and access privileges reviewed at least every six months
Review accounts for compliance with account management requirements
Map once, satisfy many
One piece of evidence, uploaded once, counts towards 7 frameworks through cross-framework mapping.
Browse every supported framework
The Bitkosh Readiness Platform has 48 built-in frameworks — 48 ready today with full control libraries — from ISO 27001, SOC 2, GDPR and HIPAA to the EU AI Act and Middle East regulations, and you can build your own. Map a control once, satisfy many.
IFSCA Cyber
Ready todayIFSC regulated entities (GIFT City)
ISO 27001
Ready todayInformation Security Management System
SOC 2
Ready todayService Organization Control Report
GDPR
Ready todayGeneral Data Protection Regulation
DPDP Act
Ready todayDigital Personal Data Protection Act
ISO 42001
Ready todayArtificial Intelligence Management System
HIPAA
Ready todayHealth Insurance Portability and Accountability Act
NIST 800-53
Ready todaySecurity and Privacy Controls
FedRAMP
Ready todayFederal Risk and Authorization Management Program
CSA STAR
Ready todayCloud Controls Matrix
CIS v8
Ready todayCritical Security Controls
CMMC
Ready todayCybersecurity Maturity Model Certification
NIST 800-171
Ready todayProtecting CUI
NCA ECC
Ready todaySaudi National Cybersecurity Authority
GCP Cloud
Ready todayGoogle Cloud security readiness topics
ITAC
Ready todayApplication-level IT controls for financial reporting readiness
Dubai ISR
Ready todayDubai Electronic Security Center (DESC)
IEC 62443
Ready todayIndustrial Automation and Control Systems Security
ISO 27017/18
Ready todayCloud Security and Privacy Controls
SOX ITGC
Ready todaySarbanes-Oxley IT General Controls
TISAX
Ready todayTrusted Information Security Assessment Exchange
SOC 1
Ready todayService Organization Control 1
Cyber Essentials
Ready todayUK NCSC Cyber Essentials
NIST CSF
Ready todayNIST Cybersecurity Framework
UAE IA
Ready todayUAE Cyber Security Council
Data Gov Controls
Ready todayData governance readiness topics
UK GDPR
Ready todayUK General Data Protection Regulation
UAE PDPL
Ready todayUAE Data Office
LGPD
Ready todayLei Geral de Protecao de Dados
CCPA
Ready todayCalifornia Consumer Privacy Act / California Privacy Rights Act
ISO 27701
Ready todayPrivacy Information Management System
NIST AI RMF
Ready todayAI Risk Management Framework
EU AI Act
Ready todayArtificial Intelligence Act
HITRUST
Ready todayHealth Information Trust Alliance Common Security Framework
IFSCA MII
Ready todayStock exchanges, clearing corporations and depositories in IFSC (GIFT City)
UK AML
Ready todayMoney Laundering Regulations 2017 as amended in 2026, POCA 2002 and Terrorism Act 2000
DORA
Ready todayDigital Operational Resilience Act
India AML
Ready todayPrevention of Money-laundering Act 2002, its Maintenance of Records Rules 2005 and sector regulator directions
UAE AML
Ready todayFederal Decree by Law 10 of 2025 and its Executive Regulations
PCI DSS
Ready todayPayment Card Industry Data Security Standard
NIS2
Ready todayNetwork and Information Security
ISO 20000
Ready todayIT Service Management System
ISO 45001
Ready todayOccupational Health & Safety Management System
ISO 9001
Ready todayQuality Management System
ISO 22301
Ready todayBusiness Continuity Management System
COBIT
Ready todayIT Governance Framework
ISO 14001
Ready todayEnvironmental Management System
ISO 31000
Ready todayRisk Management Guidelines
GCP Cloud Controls: Google Cloud is a trademark of Google LLC. This is an original Bitkosh readiness catalogue, not issued by Google, and Bitkosh is not affiliated with or endorsed by Google LLC.
Data Gov Controls: an original Bitkosh readiness catalogue. It is not legal advice and not a standards body or regulator.
ITAC: an original Bitkosh readiness catalogue, not an auditor's opinion, and not affiliated with PCAOB, SEC, COSO or ISACA. It does not mean an external auditor will accept or rely on these controls.