🌍 Regional guide
Europe (non-EU): compliance context
Switzerland, Norway, Iceland — European standards without full EU membership
Regional regulatory landscape
Non-EU European markets share many international practices but retain national rules. Switzerland, Norway, and Iceland may align closely with EU expectations without being identical in law or supervision.
12 relevant framework guides across 5 coverage categories.
Mandatory regulations
These requirements apply only when their legal, sector, entity, activity, data, or contract scope is met.
- National data-protection and cyber laws
- Local financial, critical-infrastructure, or sector obligations
- EU rules where an organisation targets people or markets in the EU
Voluntary standards and contractual assurance
These frameworks can support a consistent control baseline but do not replace mandatory legal duties.
- ISO 27001
- SOC 2
- CSA STAR
- ISO 42001
- ISO 22301
Implementation priorities
- Keep country applicability decisions explicit
- Avoid treating EU guidance as automatically local law
- Document international transfers and local hosting expectations
- Reuse global controls with country-specific legal overlays
Frameworks to explore
Information Security
Data Privacy
Financial & Critical Infrastructure
AI Governance
Business Continuity & Automotive
AssureCore workflows
Manage your controls and evidence together in a workspace.
Official regional references
Keep exploring
Framework coverage is educational and does not determine legal obligations. Confirm scope with qualified professionals and the relevant authority.