How frameworks work in cSquare
Where framework content comes from and how controls are counted.
Updated 2026-10-21
Framework content in cSquare GRC is ingested from RegGenome, so control text tracks the official source rather than a hand-copied version.
Actionable versus structural entries
Many frameworks mix requirements with structure: functions, categories, guidance. cSquare counts actionable controls separately, so NIST CSF 2.0 shows 106 actionable controls rather than every line of the document.
Using more than one framework
Run a program per framework and let control mapping share evidence across them.
Not sure which apply?
Ask Fibo "Which frameworks apply to us?" Fibo uses your industry, locations and data types, and cites each framework.
Was this helpful?