Downloads

Downloadable artefacts for the TrustSurface Framework v1.0 public release. All files are published under CC BY 4.0.

Framework document

PDF

TrustSurface Framework

Complete framework document — v1.1 public draft. Covers definition, model, lifecycle, governance, maturity, signal catalogue, and reference mappings appendix.

File integrity
SHA-256
fdd03dfd83ea3b70f06a4a2143f38763e93dbf4edaafa02d39fa406de5f175ba
Verify with
sha256sum trustsurface-framework-v1.0.pdf
CSV

Reference Mappings

Structured mappings between TrustSurface and ISO/IEC 27001, NIST CSF, COBIT, ASD Essential Eight, ISM, and PSPF.

Opens in spreadsheet applications. Compatible with Excel, Numbers, and Google Sheets.

Standards covered in reference mappings

ISO/IEC 27001 Information security management systems
NIST CSF Cybersecurity Framework — Identify, Protect, Detect, Respond, Recover
COBIT Governance and management of enterprise IT
ASD Essential Eight Australian Signals Directorate mitigation strategies
Australian Government ISM Information Security Manual — ACSC control guidance
PSPF Protective Security Policy Framework

Licence and attribution

These artefacts are published under the Creative Commons Attribution 4.0 International (CC BY 4.0) licence. You may use, adapt, and redistribute them provided appropriate credit is given. See citation guidance for the recommended attribution format.

Chetcuti, B. (2026). TrustSurface Framework (v1.1). trustsurface.org