Acuna, configured for one regulation.
Each solution page runs Comply, Implement, Operate, and Assure against one regulation's requirements, with the evidence you build reused across every other framework you run.
WHAT A SOLUTION PAGE IS
A regulation solution page shows how Acuna runs one specific compliance regime: ISO 27001, SOC 2, NIS2, DORA, the Cyber Resilience Act, GDPR, or ISO 42001. Each page maps the regulation's requirements to your controls, names an owner for every control, and assembles the audit evidence as you go, so the certification or assessment draws on work already done.
Seven regulations, each run the same way in Acuna.
The backbone most boards expect
Acuna configured to take you through scoping, Annex A controls, and the certification audit, with evidence reused across every other framework you run.
See the solution →SOC 2The report your customers ask for
Trust Services Criteria mapped to your controls, evidence collected on a cadence, and access-review packs ready before the auditor asks.
See the solution →NIS2If it just came into scope
A security baseline you switch on against controls you already run, instead of a second program built in parallel.
See the solution →DORAIf you are in or sell to EU finance
ICT risk management, the third-party register, and resilience-testing evidence, run on the same control library as the rest of your program.
See the solution →Cyber Resilience ActProduct cybersecurity duties landing on your procurement desk
Vulnerability handling, the 24 and 72 hour reporting clock, and SBOM evidence, cross-mapped with NIS2 and DORA instead of run as a fourth silo.
See the solution →GDPRProcessing records, DSARs and the 72 hour clock
Your ROPA stays current, DPIAs and processor checks share one record, and the accountability evidence a regulator asks for already exists.
See the solution →ISO 42001The management system the EU AI Act expects
AI lifecycle controls, impact assessments, and a certification audit pack, built on the same structure as ISO 27001 so the second certification costs less.
See the solution →Looking for a capability instead of a regulation?
The platform is organized by what it does too: risk management, evidence, incident response, and more.
See all modulesNot sure which of these applies to you? Start with the frameworks guide →