Frameworks

Every NCA, SDAIA and NDMO framework your organization answers to.

37 frameworks, from cybersecurity controls to laws, regulations, policies and guidelines, with more than 1,300 assessable requirements taken from the official published texts. CIYAJ works out which frameworks apply to each part of your organization from what happens there: personal data, transfers abroad, telework, social media, IoT or AI.

Assessable requirements by framework

1,317 assessable requirements in total
NCASDAIA · personal dataSDAIA · NDMOSDAIA · AI
  1. ECC-2:2024200
  2. NDMO DMPDP190
  3. CCC-2:2024175
  4. OTCC-1:2022169
  5. CSCC-1:2019105
  6. CGIoT-1:202481
  7. AI Ethics75
  8. DCC-1:202266
  9. TCC-1:202163
  10. OSMACC-1:202153
  11. PDPL IR33
  12. PDPL28
  13. NCS-1:202027
  14. NFCRM-1:202527
  15. Register Rules10
  16. DPO Rules6
  17. Transfer Reg.5
  18. Secondary Use4
Counted from the official published texts. Guidelines are kept as guidance and are not scored.

Common controls: answer once, apply to each.

Example

Many requirements repeat across frameworks. A common control is answered once and applied to each requirement it meets; each framework still validates it in its own right.

COMMON CONTROLMulti-factor authentication for remote accessOwner: Head of Identity · 4 evidence files
  • ECC-2:2024Identity and access managementImplemented
  • CCC-2:2024Identity and access managementImplemented
  • CSCC-1:2019Identity and access managementImplemented
  • TCC-1:2021Remote access to systemsImplemented

1 common control · 4 frameworks · validated in each

All 37 frameworks

National Cybersecurity Authority (NCA)10 frameworks
SDAIA · Personal data protection16 frameworks
SDAIA · National Data Management Office (NDMO)6 frameworks
SDAIA · Artificial intelligence5 frameworks

CIYAJ is an independent product. It is not affiliated with, approved or endorsed by NCA, SDAIA or NDMO.

See CIYAJ against your own frameworks.

Tell us which frameworks are in scope and we will arrange a walkthrough with your team.

Request a briefing