Frameworks
Frameworks we prepare you for
Way2Com prepares organisations for audits and assessments; independent auditors issue the reports and certificates. That separation keeps your audit objective.
| Framework | Who usually needs it | What we do |
|---|---|---|
| SOC 2 (Type 1 / Type 2) | US-facing SaaS and service providers | Readiness, controls, evidence, auditor coordination |
| ISO/IEC 27001:2022 | Companies selling to European and global enterprises | ISMS design, risk treatment, Statement of Applicability, internal audit prep |
| NIST CSF 2.0 | US organisations wanting a recognised security baseline | Maturity assessment, target profile, roadmap |
| HIPAA | US healthcare providers and their business associates | Security Rule risk analysis, safeguards, policies |
| PCI DSS v4.0 | Businesses that store, process or transmit card data | Scoping, gap assessment, remediation support |
| GDPR | Anyone processing EU residents’ personal data | Privacy program, DPIAs, DPO-as-a-service |
| CCPA / CPRA | Businesses handling California residents’ data | Data inventory, notices, consumer-request processes |
| NIS2 | Essential and important entities in the EU | Applicability check, risk-management measures, reporting readiness |
Let’s talk about your next audit or customer questionnaire.
Book a free 30-minute consultation. You will leave with a clear view of what your framework requires and a realistic timeline.