Compliance Framework Reference

These are the frameworks SeqOps scans a customer's environment against. They are not a claim that SeqOps itself holds certification to any of them — see SeqOps Information Security & Compliance Approach.

How Frameworks Work in Your Plan

• •SeqOps has four catalogs: AWS, Azure, GCP, and Server Compliance — 55 entries in total.
• •Every framework is disabled by default until it's turned on.
• •Each plan includes a set number of compliance frameworks: one on Core, three on Edge, five on Max, and a custom number on Enterprise. For partner customers, Max+ also includes five. The catalogs below show what SeqOps generally supports; your findings map against the frameworks selected for your package.

AWS Compliance Library (25)

• •CIS — 1.4, 1.5, 2.0, 3.0, 4.0.1
• •CISA
• •ENS — RD2022
• •FedRAMP-Low — Rev. 4
• •FedRAMP-Moderate — Rev. 4
• •FFIEC
• •GDPR
• •GxP-21-CFR-Part-11
• •GxP-EU-Annex-11
• •HIPAA
• •ISO27001 — 2013, 2022
• •MITRE-ATTACK
• •NIST-800-171 — Rev. 2
• •NIST-800-53 — Rev. 4, Rev. 5
• •NIST-CSF — 1.1
• •PCI — 3.2.1, 4.0
• •RBI-Cyber-Security-Framework
• •SOC2

Azure Compliance Library (12)

• •C5 — 2025
• •CCC
• •CIS Azure Foundations Benchmark — 2.0, 2.1, 3.0, 4.0
• •ENS — RD2022
• •ISO27001 — 2022
• •MITRE-ATTACK
• •NIS2
• •PCI — 4.0
• •SOC2

GCP Compliance Library (5)

• •CIS GCP Foundations Benchmark — 2.0, 3.0
• •ENS — RD2022
• •MITRE-ATTACK
• •PCI — 4.0

Server Compliance (13)

• •CIS Benchmarks
• •CIS Controls v7
• •CIS Controls v8
• •CMMC v2.0
• •GDPR
• •Gpg13
• •HIPAA
• •ISO 27001:2013
• •Mitre Techniques
• •NIST 800-53
• •PCI DSS
• •SOC 2
• •TSC

Related

For how scores are calculated against your framework, see Understanding SeqOps Compliance Scores.