{"code":{"license":"Apache-2.0","copyright":"Copyright 2026 Baden Hughes","url":"https://www.apache.org/licenses/LICENSE-2.0","sourceRepo":"https://github.com/badenh/cybersec-multifrwk-api"},"data":[{"fid":"sg-mas-trmg","country":"sg","title":"Technology Risk Management Guidelines","shortTitle":"MAS TRMG","copyright":"© Monetary Authority of Singapore (MAS). Framework content is reproduced under the MAS publication's terms.","licenseNotes":"Private source repository; API served content is derivative.","source":{"repo":"badenh/sg-mas-trmg-oscal","upstream":false},"authoritativeOscal":false,"provenance":"/provenance/sg-mas-trmg"},{"fid":"sg-ictss-cybersecurity","country":"sg","title":"Cybersecurity Control Catalog (Singapore Government ICT&SS Policy Reform)","shortTitle":"SG ICT&SS Cybersecurity","copyright":"© Government Technology Agency of Singapore (GovTech). Unofficial OSCAL conversion.","licenseNotes":"Only OSCAL copy of the live portal. Profiles import the sg-ictss-im8-reform legacy-UUID catalog.","source":{"repo":"badenh/sg-ictss-oscal","upstream":false},"authoritativeOscal":true,"provenance":"/provenance/sg-ictss-cybersecurity"},{"fid":"sg-ictss-im8-reform","country":"sg","title":"Instruction Manual 8 Reform (legacy-UUID catalog)","shortTitle":"SG IM8 Reform","copyright":"© Government Technology Agency of Singapore (GovTech). Drop-in replacement for GovTechSG/tech-standards.","licenseNotes":"Legacy-UUID sibling of sg-ictss-cybersecurity; identical body, different identity.","source":{"repo":"badenh/sg-ictss-oscal","upstream":false},"authoritativeOscal":false,"provenance":"/provenance/sg-ictss-im8-reform"},{"fid":"sg-ospar-2.0","country":"sg","title":"Guidelines on Control Objectives and Procedures for Outsourced Service Providers (OSPAR)","shortTitle":"SG OSPAR 2.0","copyright":"© Association of Banks in Singapore (ABS). Unofficial OSCAL conversion.","licenseNotes":null,"source":{"repo":"badenh/sg-ospar2.0-oscal","upstream":false},"authoritativeOscal":false,"provenance":"/provenance/sg-ospar-2.0"},{"fid":"jp-nco-cmgara-fy23","country":"jp","title":"Common Standards for Cybersecurity Measures for Government Agencies and Related Agencies (FY2023)","shortTitle":"JP NCO Common Standards FY23","copyright":"© National Center of Incident Readiness and Strategy for Cybersecurity (NISC), Japan. Unofficial OSCAL of the English translation.","licenseNotes":null,"source":{"repo":"badenh/jp-nco-kijyun-cmgara-fy23-oscal","upstream":false},"authoritativeOscal":false,"provenance":"/provenance/jp-nco-cmgara-fy23"},{"fid":"my-ncsb","country":"my","title":"National Cyber Security Baseline (Garis Asas Keselamatan Siber Negara)","shortTitle":"MY NCSB","copyright":"© National Cyber Security Agency (NACSA), Malaysia. Unofficial OSCAL conversion.","licenseNotes":null,"source":{"repo":"badenh/my-ncsb-oscal","upstream":false},"authoritativeOscal":false,"provenance":"/provenance/my-ncsb"},{"fid":"th-ncsa-cscs","country":"th","title":"Cybersecurity Standards for Cloud Systems (B.E. 2567 / 2024)","shortTitle":"TH NCSA Cloud CSCS","copyright":"© National Cyber Security Agency (NCSA), Thailand. Unofficial OSCAL conversion.","licenseNotes":null,"source":{"repo":"badenh/th-ncsa-be2567-oscal","upstream":false},"authoritativeOscal":false,"provenance":"/provenance/th-ncsa-cscs"},{"fid":"hk-s17","country":"hk","title":"Baseline IT Security Policy (S17)","shortTitle":"HK S17","copyright":"© Office of the Government Chief Information Officer (OGCIO), Hong Kong SAR. Unofficial OSCAL conversion.","licenseNotes":null,"source":{"repo":"badenh/hk-s17-baseline-itsecpol-oscal","upstream":false},"authoritativeOscal":false,"provenance":"/provenance/hk-s17"},{"fid":"au-aescsf","country":"au","title":"Australian Energy Sector Cyber Security Framework v2","shortTitle":"AU AESCSF v2","copyright":"© Australian Energy Market Operator (AEMO). Unofficial OSCAL conversion.","licenseNotes":null,"source":{"repo":"badenh/aescsf-oscal","upstream":false},"authoritativeOscal":false,"provenance":"/provenance/au-aescsf"},{"fid":"au-ism","country":"au","title":"Information Security Manual","shortTitle":"AU ISM","copyright":"© Australian Signals Directorate (ASD) / Australian Cyber Security Centre (ACSC).","licenseNotes":"Upstream third-party source. Pin to a release tag or commit SHA; bump deliberately.","source":{"repo":"AustralianCyberSecurityCentre/ism-oscal","upstream":true},"authoritativeOscal":true,"provenance":"/provenance/au-ism"},{"fid":"nz-nzism","country":"nz","title":"New Zealand Information Security Manual","shortTitle":"NZ NZISM","copyright":"© Government Communications Security Bureau (GCSB), New Zealand. Unofficial OSCAL conversion.","licenseNotes":null,"source":{"repo":"badenh/nzism-oscal","upstream":false},"authoritativeOscal":false,"provenance":"/provenance/nz-nzism"}],"disclaimer":"Unofficial. Framework content is reproduced under each agency's publication terms. The API is a mechanical presentation of published material and adds no framework content. Not affiliated with, endorsed by, or supported by any of the agencies listed. Validate against authoritative sources before relying on API responses for compliance decisions."}