Shared controls
A control can support obligations in more than one framework, so the same control work is not rebuilt per standard.
Frameworks
Framework intelligence and assurance alignment.
Continuum helps teams understand standards, applicability, mappings, control relationships, support depth, and assurance coverage without treating every framework as the same checklist.
01 / Framework coverage
Support across security, resilience, privacy, and AI governance.
Continuum provides a shared operating model for framework-oriented assurance while preserving the distinct scope, mapping depth, and maturity of each framework.
Security & information
- ISO 27001
- NIST CSF
- SOC 2
- CIS Controls
Operational resilience
- DORA
- NIS2
- ISO 22301
Privacy
- GDPR
AI governance
- ISO 42001
- EU AI Act
02 / Connected obligations
Framework requirements need applicability and mapping context.
A requirement is more useful when teams can see whether it applies, which control relationship supports it, what mapping state exists, and what assurance coverage is available.
Framework obligationWhat the framework requires and how it applies.
Canonical controlThe control that addresses the obligation.
OwnerGapProcess
EvidenceThe evidence that demonstrates the control.
ExpectationReview
Assurance stateWhere the obligation stands, with context.
- ISO 27001
- NIST CSF
- DORA
Shared controlMapped where applicable
Reusable evidenceSingle owner
03 / Control and evidence reuse
Control relationships reduce duplicate framework work.
A control can support obligations across more than one standard, and related evidence can be reused where applicable, without hiding framework-specific applicability or mapping differences.
Can supportMay map toShared where applicable
04 / Support depth
Framework support is described in honest stages.
Not every framework reaches the same depth. Continuum describes where a framework sits so expectations stay clear.
- CataloguedFramework is available in scope and catalog context.
- MappedRequirements relate to controls and operating context.
- Evidence-awareEvidence expectations and review context are connected.
- Assurance-readyWorkflow and review depth support active assurance use.
Support depth varies by framework and version.
05 / Framework Intelligence
See framework scope, mapping state, and assurance context in one view.
06 / Cross-framework mapping
Map once, review with context, reuse across frameworks.
Continuum connects equivalent and related requirements across frameworks instead of treating every framework as an isolated checklist. Mapping state, coverage, evidence links, review decisions, and rationale remain visible together so teams can evaluate reuse and identify where additional work is still required.
- Review relationships across multiple frameworks in one operating view.
- Keep acceptance state, coverage, evidence links, and rationale attached to the mapping.
- Reuse validated control and evidence context without hiding framework-specific differences.
07 / Cross-framework assurance
Shared context without flattening framework differences.
Continuum helps reduce duplicate work across frameworks while keeping the obligations that are specific to each one visible and reviewable.
Reusable evidence
Evidence collected for one control can support related obligations elsewhere, with its freshness and review state intact.
Framework-specific obligations
Requirements that are unique to a framework stay visible and reviewable. Shared context does not flatten the differences.
08 / Governance and review
Framework decisions remain reviewable.
Applicability, ownership, gaps, evidence expectations, and review status stay connected to the frameworks they belong to, so assurance decisions can be reviewed later with their context preserved.
Applicability and scope
Which requirements apply, and why, stays explicit rather than assumed.
Ownership and gaps
Owners, open gaps, and remediation work remain attached to the relevant obligations.
Review and version context
Framework scope and mappings carry version context so review work stays tied to the applicable framework state.
09 / Supported frameworks
The frameworks Continuum supports today.
Grouped by focus area. Depth differs by framework; these represent the standards currently supported within Continuum.
Security & information
- ISO 27001
- NIST CSF
- SOC 2
- CIS Controls
Operational resilience
- DORA
- NIS2
- ISO 22301
Privacy
- GDPR
AI governance
- ISO 42001
- EU AI Act
See Continuum
Align standards, mappings, and assurance coverage.
Request a focused briefing to see how Continuum handles framework scope, applicability, mappings, control relationships, and coverage.