Governance, risk, and compliance — risk assessment, control mapping across NIST CSF 2.0 / ISO 27001:2022 / SOC 2 / CIS Controls v8, gap analysis, and policy generation.
