The FISASCORE™ is based on generally well-accepted information security standards. The criteria for measurement are all referenceable to the NIST Cybersecurity Framework (CSF), and its supporting standards; NIST SP 800-53, COBIT, ISO 27001:2013, and CIS CSC.