Supported Compliance Frameworks¶
This project currently supports 5 regulatory frameworks. Each framework is defined in a single YAML file and auto-discovered at runtime.
Framework Summary¶
| Framework | Domains | Checks | Type | Last Verified | Source |
|---|---|---|---|---|---|
| CERT-In Directions on Information Security Practices 2022 | 8 | 6 | Always | 2026-06-30 | Link |
| Digital Personal Data Protection Act 2023 + Rules 2025 | 10 | 16 | Always | 2026-07-30 | Link |
| IRDAI Information and Cyber Security Guidelines 2023 | 12 | 30 | Opt-in | 2026-07-30 | Link |
| RBI Master Direction on IT Governance, Risk, Controls and Assurance Practices | 7 | 16 | Opt-in | 2026-06-30 | Link |
| SEBI Cybersecurity and Cyber Resilience Framework (CSCRF) / Cloud Framework | 6 | 10 | Opt-in | 2026-06-30 | Link |
Framework Types¶
- Always: Assessed on every scan automatically (DPDP, CERT-In)
- Opt-in: Assessed only when the user passes the activation flag (RBI, SEBI)
Adding a New Framework¶
See CONTRIBUTING_FRAMEWORKS.md for the full guide.
Quick start:
python scripts/scaffold_framework.py --new --id myframework --name "My Framework" --source-url "https://example.com"
Auto-generated on 2026-07-31 from framework YAML definitions.