NIST CSF 2.0
The framework most organizations anchor to, across six functions from Govern to Recover. Verbatim NIST wording alongside a plain-English translation.
Open NIST CSF →CIS Controls v8
The prioritized, prescriptive list, tiered by Implementation Group so a small team can tell which safeguards are the floor and which come later.
Open CIS Controls →ISO 27001 Annex A
The certification standard, across organizational, people, physical, and technological themes. Original explanations only, since the standard itself is copyrighted.
Open ISO 27001 →AI security
The guidance that has appeared as AI moved into production, including the NIST AI Risk Management Framework and the OWASP work on large language models.
Open AI security →Trying to satisfy more than one of these at once? The Control Crosswalk maps them against each other, and the policy generator writes a policy set covering all of them.