Weather the Compliance Storm

The Unified Compliance Framework reduces the regulatory tornado to a much smaller set of harmonized controls, giving you a single point of control over hundreds of complex compliance requirements from around the world.

Meeting your compliance requirements has never been this straightforward.

See the UCF controls for free or watch a short introduction.

Free Resources

Information Assurance CMMI

IT Policy Guide

List of Control Types

Terms from The Language
of Compliance

Introduction to the UCF

Also, for a limited time, you can receive a free UCF spreadsheet ($125 value) just by entering your information below. Act now, or forever be audited.

Leaders Choose UCF

Leading compliance vendors include the UCF in their products. Learn more about our partners or include the UCF in your solution.

Our Framework

The Unified Compliance Framework (UCF) harmonizes controls across hundreds of different regulations: comply once and attest to many different requirements, including PCI, Sarbanes-Oxley, HIPAA, CobiT, NIST and hundreds more. View:

All regulations in the UCF

A short introduction

UCF Common Controls

Metrics Management Toolkit

Media Disposal Toolkit

UCF in the News

BWise Licenses UCF

Microsoft Licenses UCF

Relational Security Licenses UCF

MetricStream Integrates UCF

OpenPages Licenses UCF

Q3 UCF Release
Update features Breach Notification Laws and Red Flag Rules

Lumension Licenses UCF

Who put the G in GRC?
"Akin to the Holy Grail"

Gartner Cool Vendor
"Way cool, if you're an IT compliance manager or IT auditor..."

UCF in Network World
The UCF "could save you a lot of time as well as a fair bit of money..."

UCF in Windows IT Pro
"great research & information tool..."

The UCF includes controls from hundreds of different regulations and guidelines, including: Sarbanes-Oxley Act (SOX), Basel II, Gramm-Leach-Bliley, PCI-DSS Payment Card Industry Data Security Standard, NASD Manual, HIPAA, FERC Security Program, Uniform Electronic Transactions Act (UETA), FIPS 191, Guideline for the Analysis of LAN Security, GAO Financial Audit Manual, IRS Revenue Procedure, Federal Rules of Civil Procedure, NIST SP 800-14, ISO, OGC ITIL, CobiT 3rd Edition, CobiT 4.0, ISACA IS, ISSA, COPPA, FERPA, Turnbull Guidance, UK Data Protection Act of 1998, and German Federal Data Protection Act.

View the entire list of currently tracked compliance documents.