Home › Frameworks and regulations
Frameworks and regulationsLaws are mandatory. Standards are chosen. Riskophia manages both.
A law or regulation applies to you whether you choose it or not and is enforced by a regulator. A standard, framework or certification programme is something you adopt, and an auditor or certification body assesses you against it. Riskophia keeps both kinds of obligation in the same register, mapped to the same controls and evidence. The library is AI-driven and covers the jurisdictions and sectors you operate in; these pages describe the obligations we are asked about most.
Laws and regulations
Mandatory obligations enforced by a regulator.
PIPEDAPersonal Information Protection and Electronic Documents ActSee how Riskophia helps →PHIPAPersonal Health Information Protection Act (Ontario)See how Riskophia helps →HIPAAHealth Insurance Portability and Accountability Act (United States)See how Riskophia helps →GDPRGeneral Data Protection Regulation (European Union)See how Riskophia helps →NDPR and NDPANigeria Data Protection Regulation and Nigeria Data Protection ActSee how Riskophia helps →POPIAProtection of Personal Information Act (South Africa)See how Riskophia helps →
Standards, frameworks and certifications
Adopted programmes assessed by an auditor or certification body.
SOC 2System and Organization Controls 2 (AICPA)See how Riskophia helps →ISO 27001ISO/IEC 27001 Information Security ManagementSee how Riskophia helps →NIST CSFNIST Cybersecurity FrameworkSee how Riskophia helps →Accreditation CanadaAccreditation Canada and HSO standardsSee how Riskophia helps →
Riskophia helps organizations manage compliance activities. Using Riskophia does not guarantee legal compliance, certification or regulatory approval.