Frameworks
Pick the regime that's keeping you up at night.
Argitron maps every framework's controls to a single underlying control library. Implement once, satisfy many.
ISO/IEC 27001:2022
The international standard for an Information Security Management System. 93 Annex A controls in 4 themes.
ISO/IEC 42001:2023
The world's first AI Management System standard. ~38 controls in 9 areas. Published December 2023.
ITIL 4
IT service management value-system framework. 34 management practices, 4 dimensions, Service Value Chain.
EU AI Act
EU regulation. Prohibited practices Feb 2025, GPAI Aug 2025, high-risk Aug 2026, embedded high-risk Aug 2027.
NIS2
EU directive on the security of network and information systems. National transposition in progress across member states.
SOC 2
AICPA Trust Services Criteria — Security, Availability, Processing Integrity, Confidentiality, Privacy.
NIST CSF 2.0
Cybersecurity framework. Six functions: Govern, Identify, Protect, Detect, Respond, Recover.
NIST AI RMF
AI Risk Management Framework. Govern / Map / Measure / Manage. Crosswalk to ISO 42001 published.
DORA
EU Digital Operational Resilience Act. Financial-sector ICT risk management, in force January 2025.
Stop stitching three vendors together to pass an audit.
Free under 25 assets, forever. No credit card. No sales call. Production use OK.