Weather the Compliance Storm

The Unified Compliance Framework reduces the regulatory tornado to a much smaller set of harmonized controls, giving you a single point of control over hundreds of complex compliance requirements from around the world.

Meeting your compliance requirements has never been this straightforward.

See the UCF controls for free or watch a short introduction.

Free UCF Spreadsheet

For a limited time, you can receive a free UCF spreadsheet ($125 value) just by entering your information below.

Act now, or forever be audited.

Free Resources

Information Assurance CMMI

IT Policy Guide

Compliance Acronyms

Compliance Definitions

List of Control Types

Terms from The Language
of Compliance

Introduction to the UCF

Leaders Choose UCF

Leading compliance vendors include the UCF in their products. Learn more about our partners or include the UCF in your solution.

Our Framework

The Unified Compliance Framework (UCF) harmonizes controls across hundreds of different regulations: comply once and attest to many different requirements, including PCI, Sarbanes-Oxley, HIPAA, CobiT, NIST and hundreds more. View:

All regulations in the UCF

A short introduction

UCF Common Controls

Metrics Management Toolkit

Media Disposal Toolkit

UCF in the News

Who put the G in GRC?
"Akin to the Holy Grail"; take a glimpse "into the future of GRC".

Gartner Cool Vendor
"Way cool, if you're an IT compliance manager or IT auditor..."

UCF in Network World
The UCF "could save you a lot of time as well as a fair bit of money..."

UCF in Windows IT Pro
A "great research and information tool..."

Our News

Compliance Gets Real

Archer Partners with UCF

McAfee Partners with UCF

Media Disposal Toolkit

Metrics Management Toolkit

Global SOX and PCI 1.2

The UCF includes controls from hundreds of different regulations and guidelines, including: Sarbanes-Oxley Act (SOX), Basel II, Gramm-Leach-Bliley, PCI-DSS Payment Card Industry Data Security Standard, NASD Manual, HIPAA, FERC Security Program, Uniform Electronic Transactions Act (UETA), FIPS 191, Guideline for the Analysis of LAN Security, GAO Financial Audit Manual, IRS Revenue Procedure, Federal Rules of Civil Procedure, NIST SP 800-14, ISO, OGC ITIL, CobiT 3rd Edition, CobiT 4.0, ISACA IS, ISSA, COPPA, FERPA, Turnbull Guidance, UK Data Protection Act of 1998, and German Federal Data Protection Act.

View the entire list of currently tracked compliance documents.