NIST, OWASP, CIS and other authoritative sources — one tool for all your frameworks
Whether your program relies on NIST CSF, CIS Controls or OWASP, CapGRC structures your compliance for any framework.
What NIST, OWASP, CIS requires
CapGRC allows you to manage recognized reference frameworks such as NIST CSF, CIS Controls or OWASP guides flexibly, with the same tools as for ISO 27001 or Law 25.
NIST Cybersecurity Framework (CSF)
Identify, Protect, Detect, Respond and Recover — the 5 functions of NIST CSF.
CIS Controls v8
The 18 CIS controls cover priority actions to reduce the most common risks.
OWASP Top 10
The 10 most critical application security risks.
NIST SP 800-53
Catalog of security and privacy controls for federal and private information systems.
Custom frameworks
CapGRC allows you to create custom frameworks tailored to your specific needs.
How CapGRC responds
Recommended modules
Risk Management
Identify, assess and treat your security and compliance risks with a structured methodology.
Regulatory Compliance
Manage your Law 25, ISO 27001, PCI-DSS and other framework compliance from a unified interface.
Internal Audits
Plan, execute and track your internal audits with complete end-to-end traceability.
Project Security
Integrate security from the start of your IT projects with systematic assessments and controls.
Ready to ensure your NIST, OWASP, CIS compliance?
Request a free consultation and discover how CapGRC can structure your compliance program.