Google Cloud compliance frameworks
17 Google Cloud compliance frameworks spanning industry standards, government mandates, and security benchmarks. Each framework page lists the Google Cloud controls mapped to it, with the detection tool checks that cover each control.
Core frameworks
| Framework | Mapped | Market |
|---|
| SOC 2Service Organization Control 2 (SOC 2) is an auditing framework developed by the American Institute of Certified Public Accountants (AICPA) for evalua... | 70 | General |
|---|
| PCI DSS v4.0The Payment Card Industry Data Security Standard (PCI DSS) version 4.0 is an information security standard for organizations that handle branded credi... | 52 | General, Financial Services |
|---|
| ISO/IEC 27001:2022ISO/IEC 27001:2022 is the international standard for information security management systems (ISMS). | 40 | General |
|---|
| NIS2 Directive (EU 2022/2555)The NIS2 Directive (EU 2022/2555) is the European Union's updated cybersecurity legislation that strengthens security requirements for essential and i... | 59 | Regional |
|---|
| NIST SP 800-53 Rev 5The National Institute of Standards and Technology (NIST) Special Publication 800-53 Revision 5 provides a comprehensive catalog of security and priva... | 67 | Public Sector |
|---|
| NIST Cybersecurity Framework v2.0The National Institute of Standards and Technology (NIST) Cybersecurity Framework version 2. | 122 | General |
|---|
Common frameworks
| Framework | Mapped | Market |
|---|
| CIS GCP Benchmark v3.0.0The CIS Benchmarks are security guidelines that institutions across industries can use to assist in the configuration of their environments. | 80 | GCP-specific |
|---|
| CIS GCP Benchmark v4.0.0The Center for Internet Security (CIS) is a nonprofit that promotes best practices for securing IT systems and data. | 81 | GCP-specific |
|---|
Specialized frameworks
| Framework | Mapped | Market |
|---|
| BSI C5:2025C5 (Cloud Computing Compliance Criteria Catalogue) is a criteria catalogue published by the Federal Office for Information Security (BSI). | 65 | Regional |
|---|
| GCP CFT Scorecard v1 | 25 | GCP-specific |
|---|
Retired frameworks
Superseded versions, kept for reference.
| Framework | Mapped |
|---|
| CIS GCP Benchmark v1.2.0The Center for Internet Security (CIS) is a nonprofit that promotes best practices for securing IT systems and data. | 65 |
|---|
| CIS GCP Benchmark v1.3.0 | 62 |
|---|
| CIS GCP Benchmark v2.0.0The Center for Internet Security (CIS) is a nonprofit that promotes best practices for securing IT systems and data. CIS publishes CIS Benchmarks. | 82 |
|---|
| PCI DSS v3.2.1The Payment Card Industry Data Security Standard (PCI DSS) version 3.2.1 is an information security standard for organizations that handle branded cre... | 60 |
|---|
