Framework-specific features

Capabilities tailored to a particular framework or regulator

Most of CISO Assistant is framework-agnostic — the same audit, applied-control, and evidence machinery works whether you're tracking ISO 27001, SOC 2, or an internal control set. A handful of capabilities, however, are tied to a specific framework or regulator because they implement an artefact the standard mandates in a particular shape.

This section catalogues those capabilities:

• ISO 27001 — Statement of Applicability report; organisation issues and objectives (context of the organisation).

• CCB CyFun — self-assessment Excel import and export in the format published by Belgium's Centre for Cybersecurity.

• DORA — Register of Information report and structured incident reports aligned with the Digital Operational Resilience Act.

• MonServiceSécurisé — controls export in the format expected by the French ANSSI portal.

Each page describes what the feature produces, where to find it in the UI, and what (if anything) needs to be set up first.