INSIGHT KEEPERSFramework Intelligence
Map requirements to controls, connect controls to evidence and understand where one governance activity supports multiple obligations.
Assess once. Govern many. Connect requirements across privacy, security, artificial intelligence, data governance and cybersecurity through shared controls, evidence, risk and accountability. One assessment does not automatically satisfy every regulatory obligation: applicability always depends on your organisational scope, implementation and professional interpretation.
Insight Keepers provides governance and readiness tooling. It does not provide certification or replace legal, regulatory, audit or professional advice.
Governance readiness
78.0%
Evidence coverage
71.0%
Control effectiveness
82.0%
Evidence freshness
88.0%
Remediation progress
64.0%
AI systems assessed
57.0%
Lawful processing, accountability and the rights of data subjects.
South Africa
The Protection of Personal Information Act sets conditions for the lawful processing of personal information in South Africa.
Key governance areas
Insight Keepers coverage
Processing inventory, condition level assessment, security safeguard controls, data subject request workflows and an accountability evidence trail.
European Union
The General Data Protection Regulation governs the processing of personal data of individuals in the European Union.
Key governance areas
Insight Keepers coverage
Article 5 principle mapping, records of processing, data protection impact assessments, rights workflows and transfer governance.
Privacy information management
An extension to information security management for privacy information management, covering PII controllers and processors.
Key governance areas
Insight Keepers coverage
Privacy information management controls, role definition, PII processing records and evidence linked to each control.
Management systems, security controls and operating evidence.
Information security management system
The international standard for establishing, operating and continually improving an information security management system.
Key governance areas
Insight Keepers coverage
Clause 4 to 10 management system tracking, Annex A control library, risk treatment plans, internal audit records and evidence mapping.
Trust Services Criteria
A reporting framework where an independent auditor examines controls against the Trust Services Criteria selected for the engagement.
Key governance areas
Insight Keepers coverage
Criteria level control mapping, control descriptions, operating evidence collection over the review period and auditor ready evidence packages.
Payment card data security
The Payment Card Industry Data Security Standard protects cardholder data across the environments that store, process or transmit it.
Key governance areas
Insight Keepers coverage
Cardholder data environment scoping, requirement level controls, monitoring and testing evidence and remediation tracking.
Governance of AI systems, models, decisions and oversight.
Artificial intelligence management system
The international standard for an artificial intelligence management system, covering AI governance, risk and impact.
Key governance areas
Insight Keepers coverage
AI management system tracking, AI system inventory, AI risk and impact assessment records, oversight controls and evidence.
Insight Keepers proprietary governance methodology
Proprietary methodology, not a statutory framework or certification
Our own governance methodology for organisations that need practical AI oversight before or alongside a formal standard.
Key governance areas
Insight Keepers coverage
Structured AI inventory, risk scoring, oversight documentation, model governance records and evidence linked to accountable owners.
Sector cybersecurity obligations and the data management foundations beneath them.
European Union cybersecurity directive
Directive transposed into national law, not a certification scheme
A European Union directive raising cybersecurity risk management, governance and incident reporting expectations for in scope entities.
Key governance areas
Insight Keepers coverage
Risk management measure mapping, management body accountability records, incident reporting readiness and supply chain assessments.
Data management body of knowledge
Data management reference model, not a certification framework
A reference model for data management knowledge areas, used to structure data governance capability rather than to certify an organisation.
Key governance areas
Insight Keepers coverage
Knowledge area capability assessment, data ownership records, quality and metadata practices and evidence of governance activity.
// Cross Framework Intelligence
Hover a governance control to see where the same activity typically supports several obligations.
| Governance control | ISO 27001 | SOC 2 | POPIA | PCI DSS | NIS2 |
|---|---|---|---|---|---|
| Access ManagementIdentity, authorisation and periodic access review activity. | |||||
| Security MonitoringLogging, detection and review of security relevant events. | |||||
| Data GovernanceClassification, ownership and retention of information assets. | |||||
| Incident ManagementDetection, response, reporting and post incident review. | |||||
| Third Party GovernanceSupplier assessment, contractual safeguards and ongoing review. |
Actual applicability depends on organisational scope, implementation and the specific requirement. A single control does not automatically satisfy every legal or framework requirement.
// Evidence reuse
Select an evidence type to see where it is typically reused.
Evidence types
Access review
Typically reused across the following obligations.
Illustrative reuse. Applicability depends on scope and implementation.
// Framework roadmap
Describe your environment and see how overlapping controls and shared evidence shape a sequenced governance plan.
Organisation profile
Jurisdictions
Industries
Systems
Frameworks
Generated roadmap preview
Overlapping controls
Evidence requirements
This preview is indicative. A roadmap is confirmed with your scope, systems and obligations.
// Trust Intelligence relationship
Connect your data, risks, controls, evidence and assurance into one continuously governed environment.