Official Reference
Open official site ISO/IEC 27001 & 27002
Management system and information security controls
Framework Library
Use recognized references without treating every framework as the same type of requirement.
Browse information security, cybersecurity, privacy, AI governance, and AI security references used to shape DTXI advisory, assurance, and implementation work.
How to use this library
Frameworks may define requirements, guidance, control outcomes, risk practices, or testing methods. Applicability depends on scope, jurisdiction, contracts, sector, and the assurance objective. External links open official publisher sites.
Information Security Management
Governance, risk, controls, audit, and management-system references.
Official Reference
Open official site ISO/IEC 27005
Information security risk management
Official Reference
Open official site NIST Cybersecurity Framework
Cybersecurity outcomes and organizational profiles
Official Reference
Open official site NIST Risk Management Framework
Risk-based control selection and authorization
Official Reference
Open official site CIS Critical Security Controls
Prioritized safeguards for common cyber risks
Application, Cloud & Assurance
Technical references used to shape testing, architecture review, and control validation.
Official Reference
Open official site OWASP Web Security Testing Guide
Structured web application security testing guidance
Official Reference
Open official site OWASP API Security Top 10
Common API security risks and mitigations
Official Reference
Open official site Cloud Controls Matrix
Cloud control framework and shared-responsibility mapping
Official Reference
Open official site NIST Privacy Framework
Privacy risk management and organizational outcomes
AI Governance & Security
Management-system, risk, threat, and application-security references for AI adoption.
Official Reference
Open official site NIST AI Risk Management Framework
Govern, map, measure, and manage AI risk
Official Reference
Open official site ISO/IEC 42001
AI management system requirements
Official Reference
Open official site ISO/IEC 23894
Guidance on AI risk management
Official Reference
Open official site OWASP Top 10 for LLM Applications
Common security risks in LLM-enabled applications
Official Reference
Open official site MITRE ATLAS
Knowledge base of adversarial threats to AI systems
Application Path
Move from reference to an operable control model.
DTXI uses framework alignment to support decisions—not to produce unnecessary parallel programs.
Identify
Confirm applicable obligations, stakeholder expectations, and voluntary references.
Interpret
Translate requirements into the organization’s scope, systems, data, and operating model.
Map
Reuse common controls and evidence across compatible requirements.
Operate
Assign ownership, cadence, evidence, exceptions, and improvement actions.
