Skip to content
Framework library

Compliance Frameworks Mapped to One Shared Control Library

167 frameworks mapped to one shared control library. Add the next framework without rebuilding your program. Evidence stays linked, current, and ready to share.
Browse the LibraryRequest a Walkthrough

Platform depth

Pre-Built Depth in Every Framework

Each framework ships with mapped controls, evidence definitions, and automated compliance checks. Add a framework and reuse the same proof across all of them.

167
Frameworks in the library
31,722 requirements mapped to shared controls
155,087
Automated compliance checks
Across 198 shared controls

Evidence automation

Frameworks Are Only as Good as the Evidence Behind Them

Every framework in this library connects to 1083 production integrations that automatically collect evidence. Connect once and feed proof into every framework that shares those controls.

Browse All Integrations

Framework library

167 Frameworks. Search Yours.

Every framework, regulation, and state overlay your reviewers already ask about - mapped to controls with evidence specifications.

167
frameworks

Security and privacy frameworks used in audits, certifications, and customer diligence.

N
Nacha Operating Rules
NCSC Cyber Assessment Framework (CAF)
NERC Critical Infrastructure Protection (CIP) Reliability Standards – Current Effective U.S. FERC-Applicable U.S. Baseline
NERC Rules of Procedure
NIST AI Risk Management Framework (AI RMF)
NIST Cybersecurity Framework (CSF) 2.0
NIST Privacy Framework
NIST Secure Software Development Framework (SSDF)
NIST SP 800-161 Rev. 1 Update 1 – Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations
NIST SP 800-171 (Protecting CUI in Nonfederal Systems)
NIST SP 800-218A: Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile
NIST SP 800-53 Rev. 5
S
SAMA Cyber Resilience Fundamental Requirements (CRFR)
SAMA Cyber Security Framework
SAMA Minimum Verification Controls
SEBI Cybersecurity and Cyber Resilience Framework (CSCRF)
Secure Controls Framework (SCF)
Secure Controls Framework (SCF) – EU GDPR mapping / STRM
SOC 1
SOC 2
SOC 3 – SOC for Service Organizations: Trust Services Criteria for General Use Report
SOX IT General Controls (ITGC)
StateRAMP Baseline Controls for Authorization (Authorized – Low & Moderate)
SWIFT Customer Security Controls Framework (CSCF)

How it works

Map Once. Reuse Across Every Framework.

Five steps from framework selection to reviewer handoff. Evidence links to controls, controls map to requirements, and every new framework reuses the same proof.

01
Choose Frameworks
Select the frameworks that apply to your next review cycle. Add more as your program grows.
Framework scope and ownership
02
Map to Controls
Link external requirements to one control library. Evidence stays reusable across frameworks.
Control-to-requirement mapping
03
Link Evidence
Attach evidence to controls with owners and freshness expectations. Set cadence and reminders.
Evidence with freshness tracking
04
Keep Current
Track approvals, changes, and cadence over time. Automate collection where integrations support it.
Freshness and change history
05
Share When Asked
Give reviewers structured access through Trust Center. Export organized files on demand.
Controlled reviewer access
Feature 1 of 3: AC-2 Account Management · 4 linked items
Aurora workspace showing AC-2 Account Management mapped across 3 frameworks with 4 linked evidence items.
1/3

AC-2 Account Management · 4 linked items

SOC 2 CC6.1, ISO A.9.2.1, CMMC AC.L2-3.1.1 stay attached to the same shared control instead of splitting into separate framework trackers.

Request a WalkthroughExplore Capabilities

What customers get

Evidence, Training, and Lifecycle Built into Every Framework

Aurora maps requirements to operational evidence, training programs, and lifecycle signals across 26 control domains so your team stays ahead of reviewers, not chasing them.

Automated Evidence Collection

21,213 evidence specifications across all public frameworks, collected from 33 integration sources including BC/DR Program Owner, GRC, Operations, Risk Management, and more.
BC/DR Program OwnerGRCOperationsRisk ManagementService OwnersAWSAzureAzure Monitor Logs Pull+25 more

Training Tied to Controls

Training requirements linked to framework controls with module assignments, cadence tracking, and completion evidence. Assessment question banks mapped to reviewer expectations.
Training modules tied to controls
Assessment questions with approved answers
Cadence and completion tracking
Audience-targeted assignments

Proactive Alerts and Remediation

Automated gap detection, deadline tracking, and remediation workflows across every framework. Stay ahead of review windows instead of reacting to them.
Evidence freshness alerts
Automation gap detection
Calendar deadline tracking
Remediation workflows

What reviewers ask

Different Frameworks, Same Six Questions

Reviewers ask the same six things regardless of framework. Aurora organizes your evidence so you respond consistently every time.

Access Control and Identity

What you can show

Evidence linked with source and timestamp

Governance and Approvals

What you can show

Policy versions, approval history, and decision trails

Incident Readiness

What you can show

Tabletop records, playbooks, and after-action items

Training Completion

What you can show

Assignment and completion records with dates

Vendor and Supplier Risk

What you can show

Due diligence records with follow-ups and decisions

Freshness and Timing

What you can show

Freshness tracking and change history between cycles

Ready to simplify?

See How Your Frameworks Map to One Control Library

Share the frameworks on your calendar. We will show how Aurora keeps the same evidence reusable across all of them.

Request a WalkthroughView Pricing

Common questions

Framework Questions, Answered Plainly

Clear answers about framework coverage, evidence reuse, and reviewer handoffs.

Can I manage multiple frameworks at once?
Yes. Map multiple frameworks to one control library. Evidence linked to controls is designed to be reusable across overlapping frameworks. Plan limits apply.
Do I have to remap controls for each framework?
No. Mapping is designed to be reused and updated instead of rebuilt. Add new frameworks or review cycles without starting over.
How do you prevent evidence from going stale?
Every evidence item has an owner, a freshness cadence, and automated reminders. Aurora flags what is expiring before reviewers notice.
What happens when a reviewer asks for something new?
Give reviewers structured access through Trust Center, or export organized evidence packages when someone needs offline documents.
Does Aurora guarantee compliance outcomes?
No. Aurora runs and documents compliance work. It does not guarantee certification, audit outcomes, or reviewer decisions.

Aurora does not guarantee certification, audit outcomes, or reviewer decisions. It organizes, tracks, and shares the evidence and mappings your team maintains.

Live walkthrough
Start with the Frameworks You Need This Quarter
Tell us the frameworks, renewals, or security reviews already on your calendar. We will show how Aurora reuses the same proof across all of them.
Request a Walkthrough
Preview a Reviewer Package
15-minute walkthrough. No obligation. See Aurora applied to your workflow with the exact outputs reviewers receive. (No compliance guarantees.)