Enable the standards you need
The base fee includes one standard module of your choice; each additional module is metered per calendar month via your Microsoft invoice. Details on the pricing page.
ABRO 2026
NBIV · DefenceThe Dutch defence-industry security baseline (NBIV). NormControl ships the full canonical requirement text (government publication), applicability per contract type and the registers ABRO requires, from security plan to incident register.
For defence suppliers →ISO 27001:2022
Information securityFull ISMS support: clauses 4 to 10 plus Annex A, SoA generation and cross-mapping to other enabled standards. To be honest: the ISO clause text itself is not included (ISO copyright); the product ships vendor guidance per requirement and you use your own licensed copy of the standard.
ISO 9001:2015
QualityQuality management: processes, quality objectives, management review and document control, in the same system as your information security.
ISO/IEC 42001
AI managementManagement system for responsible use of AI: policy, risk assessment of AI applications and the associated controls.
Enable several standards and shared requirements are satisfied once: one control, one piece of evidence, several standards. Your ISO 27001 access policy counts directly towards ABRO.