Compliance & Regulation
What this section is for
Section titled “What this section is for”Companies often need to show how their shared picture relates to regulations and standards (privacy, cyber, AI rules, and so on). This section lists the compliance names 7lens is allowed to show in Integrations.
This iteration: short placeholders only. Mapping a locator is not certification and not a legal compliance claim.
Entries come from:
- OSM mentions inventory (
internal/osm-mentions.md— first-classcompliance/mappings) - 7lens Groups / contracts catalogue (additional ids)
OSM first-class compliance mappings (compliance/)
Section titled “OSM first-class compliance mappings (compliance/)”| Page | Catalogue id | OSM status |
|---|---|---|
| ISO/IEC 27001 | iso27001 |
MAPPED (27001:2022 + Amd 1:2024) |
| ISO/IEC 27701 | iso27701 |
PARTIAL (27701:2025) |
| NIST CSF | nist_csf |
MAPPED (CSF 2.0) |
| GDPR | gdpr |
PARTIAL ((EU) 2016/679) |
| DORA | dora |
PARTIAL ((EU) 2022/2554 + RTS/ITS) |
| EU AI Act | ai_act |
PARTIAL ((EU) 2024/1689) |
7lens Groups only (not OSM compliance/ mapping files)
Section titled “7lens Groups only (not OSM compliance/ mapping files)”These appear in @7lens/contracts. OSM inventory lists some only as certification strings or research mentions, not as first-class compliance/*.md mappings:
| Page | Catalogue id |
|---|---|
| COBIT | cobit |
| CIS Controls | cis_controls |
| ISO/IEC 42001 | iso42001 |
| NIST AI RMF | nist_ai_rmf |
| ISO 22301 | iso22301 |
Not listed as framework pages
Section titled “Not listed as framework pages”Certification attestation strings on ICT Providers (SOC2, FedRAMP, PCI-DSS, …) from OSM examples are reference hints, not mapping frameworks. DORA RoI, GDPR RoPA, and similar EXTERNAL concepts stay out of 7lens core.
For tool and architecture frameworks, see Frameworks & Tools. Developed guide: ServiceNow.