Framework library
Catalog of available audit checklists, and creation of your own standards.
Filtering by domain
Each standard carries a domain that determines in which projects it appears. A multiple project sees all domains.
| Domain | Projects concerned |
|---|---|
cyber | EBIOS RM, IEC 62443 |
sst | EVRP — Occupational Risk Assessment |
industriel | Technical or Industrial Risks |
Supplied standards
Cyber domain
| Standard | Version |
|---|---|
| ISO/IEC 27001:2022 — Annex A | 2022 |
| Basic security rules for SMEs | — |
| ANSSI — IT Hygiene Guide | — |
| Référentiel Général de Sécurité (RGS) | v2 |
| ANSSI — Industrial Systems Audit | — |
| IEC 62443-2-1 / 3-3 — IACS cybersecurity | — |
| IEC 62443-2-4 — IACS service providers | ANSI/ISA-62443-2-4-2018 |
| Instruction Interministérielle n° 901 | — |
| NIS2 — Référentiel Cyber France (ReCyF) | v2.5 (ANSSI working document, 17/03/2026) |
| PIVOT vulnerabilities | — |
SST domain
| Standard | Version |
|---|---|
| SST obligations — French Labour Code | Up to date as of 31/07/2026 |
| ISO 45001:2018 — occupational health & safety management | 2018 |
Industrial domain
| Standard | Version |
|---|---|
| SGS Seveso — order of 26/05/2014 | Consolidated as of 31/07/2026 |
| ICPE accidental risks — order of 04/10/2010 | Consolidated as of 31/07/2026 |
| ATEX — explosion prevention | Up to date as of 31/07/2026 |
Versions matter
Regulatory standards carry a consolidation date. An audit produced with an earlier version is not invalidated, but the date must appear in the report — it is picked up automatically.
Creating your own checklist
If no standard fits, create one in the library: chapters, articles, numbering and descriptions. It then appears in the sidebar of the audit grid alongside the supplied standards.
Library = project data
Like every library, the catalog is copied into the project when opened and stays frozen there. See Managing libraries.