Comparisons
Framework comparisons
Each comparison is a requirement-level gap report in both directions. The ones below have a written introduction; every other pair is listed after them.
NIST CSF 2.0 vs ISO 27001NIST CSF 2.0 vs ISO 27001: outcomes vs a certifiable systemNIST CSF 2.0 vs CIS v8.1NIST CSF 2.0 vs CIS Controls v8.1: outcomes vs prioritised actionsNIST CSF 2.0 vs SOC 2NIST CSF 2.0 vs SOC 2: a framework you adopt vs a report you're audited forNIST CSF 2.0 vs 800-53NIST CSF 2.0 vs SP 800-53: outcomes and the controls behind themNIST CSF 2.0 vs HIPAANIST CSF 2.0 vs HIPAA Security Rule: using CSF to meet HIPAANIST CSF 2.0 vs NIS2NIS2 vs NIST CSF 2.0: an EU legal requirement through a NIST lensNIST CSF 2.0 vs Essential EightEssential Eight vs NIST CSF 2.0: Australia's baseline in global termsISO 27001 vs CIS v8.1ISO 27001 vs CIS Controls: management system meets technical baselineISO 27001 vs SOC 2ISO 27001 vs SOC 2: what carries over, and what doesn'tISO 27001 vs PCI DSSISO 27001 vs PCI DSS: a management system vs prescriptive card-data rulesISO 27001 vs 800-53ISO 27001 vs NIST SP 800-53: a certifiable standard vs a federal control catalogueISO 27001 vs HIPAAISO 27001 vs HIPAA Security Rule: an ISMS for ePHIISO 27001 vs GDPRISO 27001 vs GDPR: the security half of a privacy lawISO 27001 vs NIS2NIS2 vs ISO 27001: is your ISMS enough?ISO 27001 vs Essential EightEssential Eight vs ISO 27001: a technical baseline vs a whole security programmeSOC 2 vs PCI DSSSOC 2 vs PCI DSS: customer assurance vs card-brand complianceSOC 2 vs HIPAASOC 2 vs HIPAA: assurance report vs legal obligationSOC 2 vs NIS2SOC 2 vs NIS2: a customer report and an EU lawCMMC vs 800-53CMMC Level 2 vs NIST SP 800-53: the 110 practices and their parent catalogue
All pairs
NIST CSF 2.0 vs PCI DSSNIST CSF 2.0 vs CMMCNIST CSF 2.0 vs GDPRNIST CSF 2.0 vs DORANIST CSF 2.0 vs CPS 234NIST CSF 2.0 vs Cyber EssentialsISO 27001 vs CMMCISO 27001 vs DORAISO 27001 vs CPS 234ISO 27001 vs Cyber EssentialsCIS v8.1 vs SOC 2CIS v8.1 vs PCI DSSCIS v8.1 vs CMMCCIS v8.1 vs 800-53CIS v8.1 vs HIPAACIS v8.1 vs GDPRCIS v8.1 vs NIS2CIS v8.1 vs Essential EightCIS v8.1 vs DORACIS v8.1 vs CPS 234CIS v8.1 vs Cyber EssentialsSOC 2 vs CMMCSOC 2 vs 800-53SOC 2 vs GDPRSOC 2 vs Essential EightSOC 2 vs DORASOC 2 vs CPS 234SOC 2 vs Cyber EssentialsPCI DSS vs CMMCPCI DSS vs 800-53PCI DSS vs HIPAAPCI DSS vs GDPRPCI DSS vs NIS2PCI DSS vs Essential EightPCI DSS vs DORAPCI DSS vs CPS 234PCI DSS vs Cyber EssentialsCMMC vs HIPAACMMC vs GDPRCMMC vs NIS2CMMC vs Essential EightCMMC vs DORACMMC vs CPS 234CMMC vs Cyber Essentials800-53 vs HIPAA800-53 vs GDPR800-53 vs NIS2800-53 vs Essential Eight800-53 vs DORA800-53 vs CPS 234800-53 vs Cyber EssentialsHIPAA vs GDPRHIPAA vs NIS2HIPAA vs Essential EightHIPAA vs DORAHIPAA vs CPS 234HIPAA vs Cyber EssentialsGDPR vs NIS2GDPR vs Essential EightGDPR vs DORAGDPR vs CPS 234GDPR vs Cyber EssentialsNIS2 vs Essential EightNIS2 vs DORANIS2 vs CPS 234NIS2 vs Cyber EssentialsEssential Eight vs DORAEssential Eight vs CPS 234Essential Eight vs Cyber EssentialsDORA vs CPS 234DORA vs Cyber EssentialsCPS 234 vs Cyber Essentials
Either order works: /compare/soc-2-vs-iso-27001/ redirects to /compare/iso-27001-vs-soc-2/. Or run any pair in the gap analysis.