All five Trust Service Criteria — Security, Availability, Processing Integrity, Confidentiality, Privacy.

NIST SP 800-207 Zero Trust Architecture and NIST SP 800-171 CUI protection — both frameworks covered.

Payment Card Industry requirements for network security, access control, authentication, and audit logging.

HIPAA Technical Safeguards for ePHI access control, audit logging, person authentication, and transmission security.

ISO 27001:2022 Annex A technical controls — access management, authentication, logging, and network security.

Govern AI agents with the same zero-trust framework that protects human users. Aligned to NIST AI RMF and ISO 42001:2023.

Zero-trust access control for OT environments. Maps to CIP-005, CIP-007, and IEC 62443 foundational requirements.

FedRAMP control mapping, deployment guidance for federal environments, and support for on-premises, GovCloud, and hybrid deployments.

The NSA’s seven-pillar Zero Trust Security Model — access-centric pillars covered, supporting pillars honestly scoped.

Policy Enforcement Point security capabilities for the federal trust-zone model — Remote User and Branch Office use cases.

CJIS Security Policy v6.0 — Access Control, Identification & Authentication, and Audit & Accountability for CJI access.

The access control, authentication, and audit families at the heart of CMMC Level 2 — the NIST 800-171 controls that gate DIB contracts.