15 frameworks, across the UAE, the wider GCC, and the international standards your customers will ask you for. The library is the substrate every product reads from.
Where most of our customers are.
The regimes their customers and regulators ask about.
What an overseas customer, an auditor or an investor will ask you for.
Enumerated and mapped on paper, not yet authored into the library. The obligation set is known and most of it lands on common controls we already hold. Until that authoring is approved these are not part of the 15 above, and the page says so rather than counting them early.
Usually fewer than you fear, and rarely the ones you expected. An assessment tells you where you stand against the ones that genuinely apply. See also the deadlines that are already running.