Skip to content

Frameworks & Controls

Compliance

Understanding how Satark AI maps security activity to compliance frameworks and controls.

What is a framework?

A compliance framework is a structured set of requirements that organizations must meet. Examples:

  • SOC 2 — Trust service criteria for service organizations
  • ISO 27001 — International information security management standard
  • GDPR — European data protection regulation
  • HIPAA — US healthcare data protection
  • PCI DSS — Payment card industry security standard

What is a control?

A control is a specific requirement within a framework. For example, SOC 2's "Logical Access Controls" or ISO 27001's "A.9.2 User Access Management."

Each control defines what your organization must demonstrate — policies, configurations, monitoring, and evidence.

The Common Control Framework (CCF)

Different frameworks often require similar things. Enabling MFA might satisfy controls in SOC 2, ISO 27001, and NIST CSF simultaneously.

Satark AI uses a Common Control Framework (CCF) to map regulatory controls across frameworks:

Your Action → CCF Control → Satisfies SOC 2 + ISO 27001 + NIST CSF

Fix once, comply many times. The CCF eliminates duplicate effort by showing which frameworks a single remediation satisfies.

How controls connect to findings

When a security finding is detected (e.g. "MFA not enabled on AWS root account"), Satark AI links it to the relevant controls across your enabled frameworks. This means:

  • You see which controls are violated by each finding
  • Fixing a finding may satisfy multiple controls at once
  • Compliance status updates automatically as findings are resolved

Workflow checks

Satark AI includes workflow checks — automated validations that verify controls are satisfied. These checks run against your connected integrations and produce pass/fail results mapped to controls.

Policies and documents

Compliance also requires documented policies. Satark AI connects policies and documents to controls, so auditors can see both the policy and the technical evidence that controls are met.

Who manages frameworks?

Satark maintains the master framework library, controls, and CCF mappings. Your organization selects which frameworks apply and tracks progress against them.