Framework detail
Every framework, with its full console on the record
Each mandate gets its own dashboard composition. Open a framework to read its complete widget list, its coverage graphic and the surface variants it ships with.
Find a framework or a widgetBrowse the jurisdiction directorySEC
United States — SEC
SEC disclosure control
SEC disclosure controls are the rules a US listed issuer must satisfy before it publishes financial or material information.
DECIMA watches the systems that decide what is material, so the disclosure record is already assembled when the committee meets.
- Widgets
- 4
- Current coverage
- 88%
- Default surface
- Grid
EDGAR
United States — SEC
EDGAR submission, assembled and filed
EDGAR is the SEC's electronic filing system through which every statutory submission is tagged, validated and transmitted.
Submission header, iXBRL tags and acceptance receipt are produced from the same evidence set — no re-keying between the filing agent and the record.
- Widgets
- 3
- Current coverage
- 92%
- Default surface
- Rays
8-K
United States — SEC
The 8-K four-day clock, run for you
An 8-K is the current report a US issuer must file within four business days of a material event.
The moment an incident is judged material, the four business day clock starts. DECIMA holds the timeline, the assessment and the filing in one attributable trail.
- Widgets
- 3
- Current coverage
- 79%
- Default surface
- Orbits
CMMC
United States — DoD / DFARS
CMMC Level 2, evidence first
CMMC 2.0 is the US Department of Defense maturity model that certifies how a contractor protects controlled unclassified information.
System security plan, POA&M and access controls stay current against your live environment, so an assessor reads the record instead of interviewing your team.
- Widgets
- 3
- Current coverage
- 84%
- Default surface
- Dot field
PCI
Global — PCI Security Standards Council
PCI DSS v4.0, proven every day
PCI DSS v4.0 is the card industry standard governing how cardholder data is stored, processed and transmitted.
Segmentation, scan results and terminal inventory refresh against the cardholder environment as it actually runs — not as it looked at the last assessment.
- Widgets
- 3
- Current coverage
- 87%
- Default surface
- Mesh glow
SWIFT
Global — SWIFT CSP
SWIFT CSP attestation you can stand behind
The SWIFT Customer Security Programme is the mandatory control set every institution on the SWIFT network attests to each year.
Attestation, transfer logs and correspondent registers are reconciled continuously, so the yearly attestation restates a record that already exists.
- Widgets
- 4
- Current coverage
- 95%
- Default surface
- Contours
02
Compare two frameworks side by side
Pick any two mandates to see coverage, surface variant and the full widget list next to each other.
SEC
SEC disclosure control
SEC disclosure controls are the rules a US listed issuer must satisfy before it publishes financial or material information.
- Jurisdiction
- United States — SEC
- Current coverage
- 88%
- Default surface
- Grid
Widget list
- Disclosure control coverage
- Evidence freshness
- Scope summary
- Assurance flow
PCI
PCI DSS v4.0, proven every day
PCI DSS v4.0 is the card industry standard governing how cardholder data is stored, processed and transmitted.
- Jurisdiction
- Global — PCI Security Standards Council
- Current coverage
- 87%
- Default surface
- Mesh glow
Widget list
- Requirement status, 1 to 12
- Evidence mix
- Scope summary