23 framework workflows. Three tiers. One platform.
From Cyber Essentials to ISA 315, DORA to the EU AI Act — TAP currently provides governed assessment workflows across 23 framework catalogue entries.
Cyber Essentials
UK government-backed scheme covering five key security controls to protect against common cyber threats.
ISO/IEC 27001:2022 + Amd 1:2024
International standard for information security management systems (ISMS) with comprehensive risk-based controls.
UK GDPR
UK General Data Protection Regulation — data protection and privacy requirements for organisations handling personal data.
NIS2 Directive
EU Network and Information Security Directive — cybersecurity obligations for essential and important entities.
PCI DSS v4.0.1
Payment Card Industry Data Security Standard for organisations processing, storing, or transmitting cardholder data.
PSN Code of Connection v1.32
Public Services Network compliance for UK public sector organisations connecting to government networks.
ISO 22301:2019 + Amd 1:2024
International standard for business continuity management systems (BCMS).
DORA
EU regulation on digital operational resilience for the financial sector.
FCA Operational Resilience
FCA requirements for UK financial services firms to strengthen operational resilience.
NHS DSPT 2026–27 (v9)
NHS Data Security and Protection Toolkit — annual self-assessment for healthcare organisations.
EU AI Act Readiness
Assessment of readiness for the EU Artificial Intelligence Act compliance requirements.
ISO/IEC 42001:2023
International standard for AI management systems — responsible AI governance.
SWIFT CSCF v2026
SWIFT Customer Security Programme — mandatory security controls for SWIFT network users.
MiFID II Operational Controls
Markets in Financial Instruments Directive II — operational and IT control requirements.
CSRD Readiness
Corporate Sustainability Reporting Directive — ESG and sustainability reporting requirements.
ISA 315 (Revised 2019) ITGC
International Standard on Auditing — IT General Controls assessment for audit firms.
SOC 1 Type II Readiness
Service Organisation Control 1 — controls relevant to user entities' financial reporting.
PCAOB IT Controls (AS 2201)
Public Company Accounting Oversight Board IT control requirements for auditors.
SOX 302/404 ITGC
Sarbanes-Oxley Act IT General Controls — internal controls over financial reporting.
COBIT 2019
Enterprise IT governance and management framework assessment.
COSO Internal Control
Committee of Sponsoring Organizations — internal control framework assessment.
SOC 2 Type II Readiness
Service Organisation Control 2 — trust services criteria for security, availability, processing integrity, confidentiality, and privacy.
ISAE 3402 Readiness
International Standard on Assurance Engagements — service organisation assurance reporting.
Don't see the framework you need?
We're constantly expanding our framework coverage. Talk to us about your specific requirements.
Talk to TASK