Go to the source. These are the bodies behind the frameworks we cover, plus our own free data.
Authoritative sources
AICPA: Trust Services Criteria
The criteria SOC 2 examinations are measured against.
NIST Cybersecurity Framework 2.0
Released in February 2024 with six functions, including the new Govern function.
CISA for small businesses
Starting points for small and medium organisations.
Our free data
- Security Compliance Cost & Readiness Index, with cost figures (CSV) and platform pricing status (CSV), free to reuse under CC BY 4.0.
- Readiness assessment, with its scoring rule published on the page.