Framework library
Every framework you answer to, on one set of controls.
Map a control once and let it count everywhere it applies. SOC 2 ships today; libraries for international standards and the regulators in Pakistan, the UAE, Australia, the United States and Europe are on the way.
Live SOC 2 available now·Coming soon 59 more coming soon
IAM-02 · Hybrid
Periodic user access reviews
Review who can reach production systems and customer data every quarter; remove what is no longer needed.
- SOC 2CC6.3Live
- ISO/IEC 27001:2022A.5.18 Access rightsComing soon
- PCI DSS v4.0.1Req. 7.2.4Coming soon
- NIST CSF 2.0PR.AA-05Coming soon
- SBP ETGRMFInformation security · access controlComing soon
- APRA CPS 234Information security controlsComing soon
The SOC 2 mapping ships today; other libraries are coming soon
Names, issuers and versions were checked against official sources in October 2026 and are for orientation only. Regulations change; always confirm current requirements with the issuer or your advisers.
Common questions
About the library.
What does “coming soon” mean for a framework?
Will we have to redo our work when a new library arrives?
Does Verity certify us against these frameworks?
Our regulator is not listed. Can you add it?
Tell us what you answer to.
We will show you how Verity organises the work for your frameworks today, and what is coming next.