# Frameworks

## Explore security, financial, and privacy frameworks we support

Trustero AI is framework agnostic and can support virtually any known framework. Some of our favorites that are ready to go right now are below. Discover how Trustero simplifies compliance across frameworks with AI-powered precision.

### All frameworks

**CMMC**  
The Cybersecurity Maturity Model Certification (CMMC) is a framework developed by the U.S. Department of Defense (DoD) to assess and enhance the cybersecurity posture of the Defense Industrial Base (DIB).  
[Learn more](/content/products/frameworks/cmmc/index.html)

**DORA**  
The Digital Operational Resilience Act (DORA) establishes guidelines for managing and mitigating ICT risks in the financial sector. It ensures financial entities can withstand and recover from cyber threats, emphasizing testing, third-party risk management, and incident reporting.  
[Learn more](/content/products/frameworks/dora/index.html)

**FedRamp**  
The Federal Risk and Authorization Management Program (FedRAMP) provides a standardized approach to security assessment and monitoring for cloud products used by federal agencies. It emphasizes transparency, automation, and continuous monitoring to ensure cloud solutions remain secure.  
[Learn more](/content/products/frameworks/fedramp/index.html)

**GDPR**  
The General Data Protection Regulation (GDPR) is a comprehensive privacy law enacted by the European Union to safeguard the personal data of its citizens.  
[Learn more](/content/products/frameworks/gdpr/index.html)

**HIPAA**  
The Health Insurance Portability and Accountability Act (HIPAA) is a U.S. law designed to safeguard the privacy and security of protected health information (PHI).  
[Learn more](/content/products/frameworks/hipaa/index.html)

**HITRUST**  
The Health Information Trust Alliance (HITRUST) developed the Common Security Framework (CSF) to provide organizations with a comprehensive, flexible, and efficient approach to regulatory compliance and risk management.  
[Learn more](/content/products/frameworks/hitrust/index.html)

**ISO 27001**  
ISO 27001 is a globally recognized standard for establishing, implementing, and maintaining an effective Information Security Management System (ISMS).  
[Learn more](/content/products/frameworks/iso27001/index.html)

**ISO 27701**  
ISO/IEC 27701, published in 2019, extends ISO/IEC 27001 and ISO/IEC 27002 standards to include privacy management—specifically, how organizations should manage personal data.  
[Learn more](/content/products/frameworks/iso27701/index.html)

**NIST 800-53**  
The National Institute of Standards and Technology (NIST) develops comprehensive guidelines and frameworks, including the NIST Cybersecurity Framework (CSF) and NIST 800-53, to enhance cybersecurity and risk management.  
[Learn more](/content/products/frameworks/nist/index.html)

**NYDFS**  
The NYDFS Cybersecurity Regulation (23 NYCRR Part 500) sets comprehensive requirements to protect financial institutions and their customers.  
[Learn more](/content/products/frameworks/nydfs/index.html)

**PCI**  
The Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards developed by major credit card companies to ensure that all entities that process, store, or transmit credit card information maintain a secure environment.  
[Learn more](/content/products/frameworks/pci/index.html)

**PIPEDA**  
The Personal Information Protection and Electronic Documents Act (PIPEDA) sets the ground rules for how businesses must handle personal information in Canada.  
[Learn more](/content/products/frameworks/pipeda/index.html)