Framework × Region Demand Combinations in 2026
Every framework × region combination ranked by buyer demand in the last 30 days — the clearest signal of where specific compliance needs concentrate.
Period: May 6 – Jun 5, 2026
| # | Name | Trend (12 wk) | Demand | 30d change |
|---|---|---|---|---|
| 1 | SOC 2 Type II × France | 200 | ▲ 100% | |
| 2 | CMMC × Asia | 65 | ▲ 983% | |
| 3 | CIS Controls × Asia | 63 | ▲ 800% | |
| 4 | CSA STAR × Asia | 62 | ▲ 786% | |
| 5 | CMMC × Belgium | 61 | ▲ 1425% | |
| 6 | CCPA × Denmark | 61 | ▲ 1120% | |
| 7 | CCPA × Brazil | 60 | ▲ 757% | |
| 8 | CIS Controls × Canada | 60 | ▲ 900% | |
| 9 | CMMC × Australia | — | 59 | ▲ 883% |
| 10 | CCPA × Canada | 59 | ▲ 1867% | |
| 11 | CSA STAR × Austria | 58 | ▲ 2800% | |
| 12 | CCPA × Asia | 58 | ▲ 5700% | |
| 13 | CMMC × Austria | 57 | ▲ 1800% | |
| 14 | CIS Controls × Denmark | 57 | ▲ 1040% | |
| 15 | CCPA × Austria | — | 57 | ▲ 1800% |
| 16 | CSA STAR × Denmark | 56 | ▲ 1020% | |
| 17 | CSA STAR × Brazil | 56 | ▲ 1300% | |
| 18 | CIS Controls × Australia | — | 56 | ▲ 1300% |
| 19 | CCPA × Belgium | 56 | ▲ 1300% | |
| 20 | CSA STAR × Australia | 56 | ▲ 2700% | |
| 21 | CSA STAR × Canada | 56 | ▲ 1300% | |
| 22 | CSA STAR × Belgium | 54 | ▲ 980% | |
| 23 | CMMC × Brazil | — | 53 | ▲ 960% |
| 24 | CCPA × Australia | 53 | ▲ 1667% | |
| 25 | CIS Controls × Brazil | — | 52 | ▲ 1200% |
| 26 | CMMC × Canada | — | 50 | ▲ 1150% |
| 27 | CMMC × Denmark | 50 | ▲ 614% | |
| 28 | CIS Controls × Austria | — | 49 | ▲ 1533% |
| 29 | CIS Controls × Belgium | — | 45 | ▲ 800% |
| 30 | Cyber Essentials × Asia | — | 42 | ▲ 4100% |
| 31 | Cyber Essentials × Denmark | — | 41 | ▲ 4000% |
| 32 | CIS Controls × Europe | — | 41 | ▲ 720% |
| 33 | Cyber Essentials × Canada | — | 41 | ▲ 100% |
| 34 | Cyber Essentials × Brazil | — | 40 | ▲ 100% |
| 35 | CCPA × France | — | 40 | ▲ 3900% |
| 36 | CMMC × Europe | — | 39 | ▲ 875% |
| 37 | Cyber Essentials × Australia | — | 37 | ▲ 100% |
| 38 | Cyber Essentials × Belgium | — | 36 | ▲ 3500% |
| 39 | Cyber Essentials × Austria | — | 36 | ▲ 100% |
| 40 | CSA STAR × Europe | — | 36 | ▲ 500% |
| 41 | CSA STAR × France | — | 35 | ▲ 3400% |
| 42 | CCPA × Europe | — | 34 | ▲ 1033% |
| 43 | CCPA × Germany | — | 32 | ▲ 967% |
| 44 | ISO 27001 × Europe | 29 | ▲ 625% | |
| 45 | CIS Controls × France | — | 29 | ▲ 2800% |
| 46 | CIS Controls × Germany | — | 28 | ▲ 600% |
| 47 | ISO 27001 × Austria | — | 25 | ▲ 733% |
| 48 | CSA STAR × Germany | — | 25 | ▲ 733% |
| 49 | CMMC × France | — | 25 | ▲ 2400% |
| 50 | CMMC × Sweden | — | 24 | ▲ 1100% |
| 51 | ISO 27001 × Asia | — | 23 | ▲ 2200% |
| 52 | CMMC × UAE | — | 23 | ▲ 100% |
| 53 | CMMC × United Kingdom | — | 23 | ▲ 2200% |
| 54 | CIS Controls × Portugal | — | 23 | ▲ 100% |
| 55 | CSA STAR × United States | — | 22 | ▲ 2100% |
| 56 | CMMC × Poland | — | 21 | ▲ 2000% |
| 57 | CIS Controls × United Kingdom | — | 20 | ▲ 1900% |
| 58 | Cyber Essentials × Europe | — | 20 | ▲ 900% |
| 59 | CSA STAR × Netherlands | — | 19 | ▲ 100% |
| 60 | CIS Controls × Sweden | — | 19 | ▲ 217% |
| 61 | ISO 27001 × Australia | — | 18 | ▲ 13% |
| 62 | CSA STAR × Sweden | — | 18 | ▲ 800% |
| 63 | GDPR × Canada | — | 18 | ▲ 100% |
| 64 | CMMC × Germany | — | 18 | ▲ 260% |
| 65 | ISO 27001 × Canada | — | 17 | ▲ 143% |
| 66 | CMMC × Spain | — | 17 | ▲ 467% |
| 67 | CCPA × Poland | — | 17 | ▲ 100% |
| 68 | CMMC × Norway | — | 17 | ▲ 100% |
| 69 | ISO 27001 × Belgium | — | 16 | ▲ 700% |
| 70 | CCPA × Norway | — | 16 | ▲ 100% |
| 71 | CIS Controls × Poland | — | 16 | ▲ 1500% |
| 72 | CIS Controls × Norway | — | 15 | ▲ 100% |
| 73 | CIS Controls × UAE | — | 15 | ▲ 100% |
| 74 | CMMC × Netherlands | — | 15 | ▲ 1400% |
| 75 | GDPR × Asia | — | 15 | ▲ 100% |
| 76 | CSA STAR × Spain | — | 14 | ▲ 180% |
| 77 | CSA STAR × Portugal | — | 14 | ▲ 100% |
| 78 | CCPA × United Kingdom | — | 14 | ▲ 100% |
| 79 | CSA STAR × Finland | — | 14 | ▲ 100% |
| 80 | CIS Controls × Spain | — | 14 | ▲ 1300% |
| 81 | CIS Controls × United States | — | 14 | ▲ 1300% |
| 82 | GDPR × Denmark | — | 13 | ▲ 100% |
| 83 | CIS Controls × Finland | — | 13 | ▲ 100% |
| 84 | CCPA × Spain | — | 13 | ▲ 333% |
| 85 | CSA STAR × Poland | — | 13 | ▲ 100% |
| 86 | Cyber Essentials × Germany | — | 13 | ▲ 1200% |
| 87 | Cyber Essentials × France | — | 13 | ▲ 100% |
| 88 | ISO 27001 × Brazil | — | 13 | ▲ 550% |
| 89 | SOC 2 × Brazil | — | 12 | ▲ 100% |
| 90 | SOC 2 × Europe | — | 12 | ▲ 100% |
| 91 | CSA STAR × UAE | — | 12 | ▲ 1100% |
| 92 | CCPA × UAE | — | 12 | ▲ 1100% |
| 93 | CCPA × United States | — | 12 | ▲ 100% |
| 94 | HIPAA × Denmark | — | 11 | ▲ 267% |
| 95 | CCPA × Global | — | 11 | ▲ 83% |
| 96 | ISO 27001 × Denmark | — | 11 | ▲ 1000% |
| 97 | Cyber Essentials × Spain | — | 11 | ▲ 450% |
| 98 | Cyber Essentials × Sweden | — | 11 | ▲ 100% |
| 99 | CSA STAR × United Kingdom | — | 11 | ▲ 100% |
| 100 | CCPA × Netherlands | — | 11 | ▲ 267% |
| 101 | SOC 2 × Australia | — | 11 | ▼ 42% |
| 102 | CSA STAR × India | — | 11 | ▲ 450% |
| 103 | ISO 27001 × United States | — | 10 | ▼ 41% |
| 104 | CCPA × Sweden | — | 10 | ▲ 150% |
| 105 | CMMC × India | — | 10 | ▲ 400% |
| 106 | CIS Controls × Singapore | — | 10 | ▲ 100% |
| 107 | CIS Controls × Ireland | — | 10 | ▲ 100% |
| 108 | CMMC × United States | — | 10 | ▲ 100% |
| 109 | CMMC × Italy | — | 10 | ▲ 233% |
| 110 | CSA STAR × South Africa | — | 9 | ▲ 80% |
| 111 | CMMC × Singapore | — | 9 | ▲ 800% |
| 112 | HIPAA × Canada | — | 9 | ▲ 80% |
| 113 | CIS Controls × India | — | 9 | ▲ 800% |
| 114 | CSA STAR × Switzerland | — | 9 | ▲ 100% |
| 115 | CIS Controls × Netherlands | — | 9 | ▲ 100% |
| 116 | CSA STAR × Norway | — | 9 | ▲ 100% |
| 117 | Cyber Essentials × United Kingdom | — | 9 | ▲ 100% |
| 118 | GDPR × United States | — | 8 | ▲ 167% |
| 119 | GDPR × Europe | — | 8 | ▲ 700% |
| 120 | CCPA × India | — | 8 | ▲ 100% |
| 121 | SOC 2 Type II × Denmark | — | 8 | ▲ 100% |
| 122 | Cyber Essentials × Netherlands | — | 8 | ▲ 100% |
| 123 | Cyber Essentials × UAE | — | 8 | ▲ 100% |
| 124 | PCI DSS × Canada | — | 8 | ▲ 100% |
| 125 | Cyber Essentials × United States | — | 8 | ▲ 100% |
| 126 | CSA STAR × Ireland | — | 8 | ▲ 100% |
| 127 | CCPA × Switzerland | — | 8 | ▲ 100% |
| 128 | GDPR × Brazil | — | 8 | ▲ 100% |
| 129 | GDPR × Belgium | — | 8 | ▲ 100% |
| 130 | Cyber Essentials × Poland | — | 8 | ▲ 100% |
| 131 | GDPR × United Kingdom | — | 7 | ▲ 600% |
| 132 | CCPA × Finland | — | 7 | ▲ 100% |
| 133 | CIS Controls × South Africa | — | 7 | ▲ 40% |
| 134 | CMMC × Global | — | 7 | ▲ 133% |
| 135 | CMMC × Ireland | — | 7 | ▲ 600% |
| 136 | ISO 42001 × Belgium | — | 7 | ▲ 100% |
| 137 | ISO 42001 × Canada | — | 7 | ▲ 100% |
| 138 | ISO 42001 × Brazil | — | 7 | ▲ 100% |
| 139 | ISO 27701 × United States | — | 7 | ▲ 600% |
| 140 | PCI DSS × Denmark | — | 7 | ▲ 100% |
| 141 | HIPAA × Austria | — | 6 | ▲ 500% |
| 142 | SOC 2 × Canada | — | 6 | ▲ 200% |
| 143 | GDPR × Netherlands | — | 6 | ▼ 25% |
| 144 | HIPAA × Belgium | — | 6 | ▲ 100% |
| 145 | CCPA × Ireland | — | 6 | ▲ 100% |
| 146 | HIPAA × Brazil | — | 6 | ▲ 100% |
| 147 | Cyber Essentials × Portugal | — | 6 | ▲ 100% |
| 148 | PCI DSS × Belgium | — | 6 | ▲ 100% |
| 149 | CMMC × Finland | — | 6 | ▲ 500% |
| 150 | SOC 2 Type II × Germany | — | 6 | ▲ 500% |
| 151 | CMMC × South Africa | — | 6 | ▲ 50% |
| 152 | SOC 2 Type II × Australia | — | 6 | ▲ 50% |
| 153 | SOC 2 Type II × Asia | — | 6 | — |
| 154 | SOC 2 Type II × UAE | — | 6 | ▲ 100% |
| 155 | Cyber Essentials × Norway | — | 6 | ▲ 100% |
| 156 | SOC 2 × Asia | — | 6 | ▲ 100% |
| 157 | PCI DSS × Austria | — | 6 | ▲ 100% |
| 158 | ISO 27001 × Norway | — | 5 | ▲ 400% |
| 159 | ISO 27001 × United Kingdom | — | 5 | ▲ 25% |
| 160 | ISO 42001 × Australia | — | 5 | ▲ 100% |
| 161 | Cyber Essentials × Singapore | — | 5 | ▲ 100% |
| 162 | SOC 2 Type II × United States | — | 5 | ▼ 29% |
| 163 | ISO 27001 × France | — | 5 | ▲ 100% |
| 164 | SOC 2 × Belgium | — | 5 | ▲ 100% |
| 165 | GDPR × Austria | — | 5 | ▲ 100% |
| 166 | Cyber Essentials × Switzerland | — | 5 | ▲ 100% |
| 167 | CIS Controls × Global | — | 5 | ▲ 150% |
| 168 | SOC 2 Type II × Belgium | — | 5 | — |
| 169 | ISO 42001 × Spain | — | 5 | ▲ 400% |
| 170 | CCPA × Italy | — | 5 | ▲ 25% |
| 171 | CSA STAR × Italy | — | 5 | ▲ 67% |
| 172 | HIPAA × Asia | — | 5 | — |
| 173 | CCPA × South Africa | — | 5 | ▲ 150% |
| 174 | SOC 2 × Denmark | — | 5 | ▲ 100% |
| 175 | ISO 27001 × Italy | — | 5 | ▲ 100% |
| 176 | GDPR × Germany | — | 5 | ▲ 100% |
| 177 | CMMC × Switzerland | — | 5 | ▲ 400% |
| 178 | DORA × Netherlands | — | 5 | ▲ 100% |
| 179 | SOC 2 × India | — | 4 | ▼ 20% |
| 180 | SOC 2 Type II × Netherlands | — | 4 | ▼ 43% |
| 181 | ISO 42001 × Germany | — | 4 | ▲ 300% |
| 182 | ISO 27001 × Netherlands | — | 4 | ▼ 89% |
| 183 | CMMC × Portugal | — | 4 | ▲ 100% |
| 184 | GDPR × Italy | — | 4 | ▲ 100% |
| 185 | SOC 2 × Austria | — | 4 | ▲ 100% |
| 186 | CIS Controls × Switzerland | — | 4 | ▲ 300% |
| 187 | NIST CSF × Canada | — | 4 | ▲ 100% |
| 188 | ISO 27001 × Poland | — | 4 | ▲ 100% |
| 189 | ISO 42001 × Austria | — | 4 | ▲ 100% |
| 190 | CIS Controls × Italy | — | 4 | ▼ 33% |
| 191 | ISO 42001 × Asia | — | 4 | ▲ 300% |
| 192 | GDPR × Australia | — | 4 | ▲ 100% |
| 193 | CSA STAR × Global | — | 4 | — |
| 194 | HIPAA × Australia | — | 4 | ▲ 100% |
| 195 | ISO 27701 × Denmark | — | 4 | ▲ 100% |
| 196 | ISO 42001 × United Kingdom | — | 4 | ▲ 100% |
| 197 | SOC 2 Type II × Brazil | — | 4 | ▲ 100% |
| 198 | NIST CSF × Brazil | — | 4 | ▲ 100% |
| 199 | ISO 42001 × United States | — | 4 | ▲ 300% |
| 200 | NIST CSF × Turkey | — | 4 | ▲ 100% |
| 201 | SOC 2 Type II × Canada | — | 4 | ▲ 33% |
| 202 | ISO 27001 × India | — | 4 | ▲ 100% |
| 203 | SOC 2 Type II × India | — | 3 | ▲ 50% |
| 204 | DORA × Asia | — | 3 | — |
| 205 | CCPA × Singapore | — | 3 | ▲ 100% |
| 206 | ISO 42001 × Switzerland | — | 3 | ▲ 50% |
| 207 | ISO 27001 × Ireland | — | 3 | ▲ 200% |
| 208 | PCI DSS × Brazil | — | 3 | ▲ 100% |
| 209 | ISO 42001 × Europe | — | 3 | ▲ 100% |
| 210 | Cyber Essentials × Ireland | — | 3 | ▲ 100% |
| 211 | Cyber Essentials × Middle East | — | 3 | ▲ 200% |
| 212 | HIPAA × Europe | — | 3 | — |
| 213 | ISO 42001 × Denmark | — | 3 | ▲ 100% |
| 214 | PCI DSS × Australia | — | 3 | ▲ 100% |
| 215 | Cyber Essentials × Italy | — | 3 | ▲ 200% |
| 216 | ISO 27001 × Germany | — | 3 | ▲ 100% |
| 217 | GDPR × Ireland | — | 3 | ▲ 100% |
| 218 | SOC 2 Type II × Ireland | — | 3 | ▲ 100% |
| 219 | ISO 27001 × UAE | — | 3 | ▲ 100% |
| 220 | CCPA × Portugal | — | 3 | ▲ 100% |
| 221 | SOC 2 Type II × Poland | — | 3 | ▲ 100% |
| 222 | HITRUST × Canada | — | 3 | ▲ 200% |
| 223 | GDPR × India | — | 2 | ▲ 100% |
| 224 | ISO 27001 × Spain | — | 2 | ▲ 100% |
| 225 | Cyber Essentials × India | — | 2 | ▲ 100% |
| 226 | CSA STAR × Singapore | — | 2 | ▲ 100% |
| 227 | GDPR × South Africa | — | 2 | ▲ 100% |
| 228 | NIST CSF × Europe | — | 2 | ▲ 100% |
| 229 | NIST CSF × Belgium | — | 2 | ▲ 100% |
| 230 | NIST CSF × Netherlands | — | 2 | ▲ 100% |
| 231 | NIS2 × Australia | — | 2 | ▲ 100% |
| 232 | SOC 2 Type II × Spain | — | 2 | ▲ 100% |
| 233 | HITRUST × Denmark | — | 2 | ▲ 100% |
| 234 | PCI DSS × Asia | — | 2 | ▲ 100% |
| 235 | ISO 27001 × Turkey | — | 2 | ▲ 100% |
| 236 | SOC 2 Type II × Switzerland | — | 2 | ▲ 100% |
| 237 | ISO 42001 × Sweden | — | 2 | ▲ 100% |
| 238 | SOC 2 Type II × Austria | — | 2 | ▼ 50% |
| 239 | SOC 2 Type II × Italy | — | 2 | ▲ 100% |
| 240 | ISO 27701 × Austria | — | 2 | ▲ 100% |
| 241 | SOC 2 Type II × United Kingdom | — | 2 | ▲ 100% |
| 242 | GDPR × Norway | — | 2 | ▲ 100% |
| 243 | SOC 2 Type II × Singapore | — | 2 | ▲ 100% |
| 244 | ISO 27701 × United Kingdom | — | 2 | ▲ 100% |
| 245 | ISO 22301 × Austria | — | 2 | ▲ 100% |
| 246 | SOC 2 Type II × Finland | — | 2 | ▲ 100% |
| 247 | Cyber Essentials × South Africa | — | 2 | ▲ 100% |
| 248 | NIS2 × Asia | — | 2 | ▲ 100% |
| 249 | ISO 22301 × United States | — | 2 | ▲ 100% |
| 250 | ISO 9001 × Netherlands | — | 2 | ▲ 100% |
| 251 | GDPR × Turkey | — | 2 | ▲ 100% |
| 252 | GDPR × UAE | — | 2 | ▲ 100% |
| 253 | GDPR × France | — | 2 | ▲ 100% |
| 254 | SOC 2 Type II × Turkey | — | 2 | ▲ 100% |
| 255 | NIST CSF × Denmark | — | 2 | ▲ 100% |
| 256 | NIS2 × Canada | — | 2 | ▲ 100% |
| 257 | SOC 2 Type II × Norway | — | 2 | ▲ 100% |
| 258 | ISO 27701 × Asia | — | 2 | ▲ 100% |
| 259 | CCPA × Middle East | — | 2 | ▼ 67% |
| 260 | GDPR × Global | — | 2 | — |
| 261 | HITRUST × Australia | — | 2 | ▲ 100% |
| 262 | HITRUST × Asia | — | 2 | ▲ 100% |
| 263 | GDPR × Finland | — | 2 | ▲ 100% |
| 264 | HITRUST × Brazil | — | 2 | — |
| 265 | Cyber Essentials × Finland | — | 2 | ▲ 100% |
| 266 | HITRUST × Belgium | — | 2 | — |
| 267 | PCI DSS × Turkey | — | 1 | ▲ 100% |
| 268 | ISO 42001 × UAE | — | 1 | ▲ 100% |
| 269 | NIST CSF × Austria | — | 1 | ▲ 100% |
| 270 | ISO 42001 × India | — | 1 | ▲ 100% |
| 271 | SOC 2 Type II × Europe | — | 1 | ▼ 86% |
| 272 | GDPR × Portugal | — | 1 | ▲ 100% |
| 273 | DORA × Canada | — | 1 | ▲ 100% |
| 274 | NIST SP 800-53 × Austria | — | 1 | ▲ 100% |
| 275 | NIST SP 800-171 × Belgium | — | 1 | ▲ 100% |
| 276 | GDPR × Sweden | — | 1 | ▲ 100% |
| 277 | PCI DSS × Europe | — | 1 | ▲ 100% |
| 278 | DORA × Brazil | — | 1 | — |
| 279 | ISO 27701 × Brazil | — | 1 | — |
| 280 | NIS2 × Denmark | — | 1 | ▲ 100% |
| 281 | SOC 2 × Turkey | — | 1 | ▲ 100% |
| 282 | SOC 2 Type II × Portugal | — | 1 | ▲ 100% |
| 283 | ISO 27001 × Finland | — | 1 | ▲ 100% |
| 284 | ISO 42001 × France | — | 1 | ▲ 100% |
| 285 | ISO 22301 × Canada | — | 1 | ▲ 100% |
| 286 | NIST SP 800-171 × Canada | — | 1 | ▲ 100% |
| 287 | ISO 9001 × Canada | — | 1 | ▲ 100% |
| 288 | CSA STAR × Middle East | — | 1 | ▼ 80% |
| 289 | ISO 42001 × Turkey | — | 1 | ▲ 100% |
| 290 | NIS2 × Brazil | — | 1 | ▲ 100% |
| 291 | SOC 2 Type II × South Africa | — | 1 | ▲ 100% |
| 292 | ISO 27001 × Portugal | — | 1 | ▲ 100% |
| 293 | DORA × Austria | — | 1 | — |
| 294 | ISO 9001 × Austria | — | 1 | ▲ 100% |
| 295 | NIST SP 800-171 × Austria | — | 1 | ▲ 100% |
| 296 | GDPR × Poland | — | 1 | ▲ 100% |
| 297 | ISO 27701 × Australia | — | 1 | ▲ 100% |
| 298 | Cyber Essentials × Global | — | 1 | ▲ 100% |
| 299 | NIS2 × Europe | — | 1 | ▲ 100% |
| 300 | NIS2 × Belgium | — | 1 | ▲ 100% |
| 301 | SOC 2 Type II × Sweden | — | 1 | ▲ 100% |
| 302 | CIS Controls × Middle East | — | 1 | ▼ 80% |
| 303 | ISO 27001 × South Africa | — | 1 | ▼ 67% |
| 304 | ISO 42001 × Netherlands | — | 1 | ▲ 100% |
| 305 | DORA × Australia | — | 1 | ▲ 100% |
| 306 | HITRUST × Austria | — | 1 | ▼ 50% |
| 307 | SOC 2 Type II × Global | — | 1 | ▼ 83% |
| 308 | ISO 27701 × Europe | — | 1 | ▲ 100% |
| 309 | DORA × Belgium | — | 1 | ▲ 100% |
Ranked by aggregated visitor interest across ISMS Directory. This is the full list; the Trends overview shows the top 10 per dimension.