# GRADUM Blog — Full Documentation

> Expert insights on maturity assessments, compliance standards, and cybersecurity best practices. GRADUM Blog helps organizations understand, compare, and implement standards like ISO 27001, DORA, NIS2, NIST CSF, SOC 2, PCI DSS, and more.

## Overview

GRADUM Blog (blog.gradum.io) is a comprehensive compliance standards knowledge base with three main sections:

1. **Blog** (~200 articles): In-depth articles covering compliance standards, implementation strategies, industry trends, and cybersecurity best practices. Formats include standard articles, implementation guides with infographics, top-X comparison guides, and podcast episodes.

2. **Compare Standards** (~4,800 comparisons): The largest section. Every page compares two compliance/cybersecurity standards side-by-side across multiple dimensions:
   - Quick Verdict: A concise summary of which standard is better suited for what use case
   - Cost Rating: Relative implementation cost (€ to €€€€)
   - Complexity Rating: Low to Very High
   - Implementation Time: 0-6 months to 18-24 months
   - Key Features: Bullet-point lists of each standard's main features
   - Detailed Analysis: Long-form descriptions of each standard
   - Key Differences Table: Dimension-by-dimension comparison (scope, focus, certification, etc.)
   - FAQ: Standard-specific frequently asked questions

3. **Support** (~30 articles): Help desk documentation for the GRADUM maturity assessment platform.

## Standards Covered (100+)

### Information Security
ISO 27001, ISO 27002, ISO 27017 (Cloud), ISO 27018 (PII in Cloud), ISO 27701 (Privacy), SOC 1, SOC 2, SOC 3, NIST CSF, NIST 800-53, NIST 800-171, CIS Controls, CSA STAR, TISAX

### Financial & Payment
PCI DSS, SOX, Basel III/IV, MAS TRM

### EU Regulations
DORA (Digital Operational Resilience Act), NIS2, GDPR, EU AI Act, ENISA Guidelines

### US Regulations
HIPAA, HITRUST, FedRAMP, CMMC, CCPA, NYDFS 23 NYCRR 500, GLBA

### Governance Frameworks
COBIT, ITIL, TOGAF, ISO 9001, ISO 14001, ISO 22301 (Business Continuity)

### Privacy
GDPR, CCPA, LGPD (Brazil), POPIA (South Africa), PDPA (Singapore/Thailand), PIPL (China)

### Industry-Specific
TISAX (Automotive), SWIFT CSP (Financial Messaging), NERC CIP (Energy), IEC 62443 (Industrial)

## Content Structure

### Comparison Pages URL Pattern
`/compare/{standard-a}-vs-{standard-b}`
Example: `/compare/iso-27001-vs-soc-2`

Both slug orders work — the site automatically resolves reversed slugs to the canonical version.

### Blog Articles URL Pattern
`/blog/{slug}`
Example: `/blog/iso-27001-implementation-guide`

### Support Articles URL Pattern
`/support/{slug}`
Example: `/support/getting-started-with-gradum`

## Search

Full-text search is available at `/search?q={query}` covering all content types.

## About GRADUM

GRADUM provides a maturity assessment platform that helps organizations evaluate their compliance posture against multiple standards simultaneously. The platform supports over 100 standards and enables creators to build custom maturity models.

- Website: https://gradum.io
- Features: https://gradum.io/features
- Maturity Models: https://gradum.io/maturity-models
- Pricing: https://gradum.io/pricing
- Platform: https://gradum.io/dashboard
- LinkedIn: https://www.linkedin.com/company/gradum

## API & Data

Content is managed via a headless CMS (ContentScaler) and rendered server-side with ISR (Incremental Static Regeneration). Pages revalidate every hour. The site supports on-demand revalidation via webhook.

## Contact

For questions about content or partnership inquiries, visit https://gradum.io/support.