There is a multiplicity of different standards, procedures, guidelines and the like, that both acquiring organizations and suppliers use as requirements, benchmarks and indicators during the contracting process. This multiplicity can make it hard for acquiring organizations to judge what supplier certifications actually mean; what value to place on certifications and what security benefits certifications actually indicate. The Standards Comparison Tool is an easy-to-use web-based application that displays and tabulates the details of the differences in controls between recognized international Information Security standards. It is hosted by Aruvio and utilizes the Unified Compliance Framework to do so.
Aruvio Inc. (wholly owned subsidiary of Virima Technologies) provides organizations with enterprise scale, easy-to-use and cost-effective governance, risk, and compliance (GRC) software solutions with support for more than 900 compliance regulations, frameworks, and standards. Aruvio GRC is built and delivered on Salesforce.com, which is a proven platform for availability, scalability and security. Aruvio offers advanced social collaboration capabilities in addition to easy-to-use process automation features. Aruvio GRC is quick to deploy and easy to use. Aruvio offers free trial and pay-as-you-go pricing to reduce risk and guarantee rapid, proven results for any size organization.\r\n\r\nThe Information Security Forum (ISF) is an independent, not-for-profit organization with a Membership comprising many of the world”s leading organizations featured on the Fortune 500 and Forbes 2000 lists. We are dedicated to investigating, clarifying and resolving key issues in cyber, information security and risk management, by developing best practice methodologies, processes and solutions that meet the business needs of our Members.\r\n\r\nThe Unified Compliance Framework™ is unique; it”s the only industry-vetted compliance database that reduces the regulatory maze to a much smaller set of “harmonized” controls, giving you a single point of management over hundreds of complex compliance requirements from around the world. We help you map the overlap between multiple authority documents, create your control list for specific IT areas, and clarify any conflicts created by overlapping authority documents.