NIST Cybersecurity Framework

Vanta's agentic controls slot into the ISO program you already run

The library maps to ISO 27001 and 42001 rather than asking for a new certificate, which is why trying it costs a scoping meeting. The 22 buyer-side controls are the half that will end up in vendor questionnaires.