# Can I use this tool for more than one standard

As per my understanding, this tool help to meet any specific standard such as ISO 27001, but my question is that can I ensure with this tool that I am meeting ISO 27001 & PCI DSS both together?

##### Post Metadata
- Posted at: over 5 years ago
- Author title: Information Security Engineer at Chata.ai | Building Conversational AI for Data Access 



## Comments
### Comment 1

Yes, you can create multiple audit programs that allow you to define the frameworks -> Controls -> Evidence to specific standards instead of it being a combined list of all controls. You can also map Controls that are required for both standards to an audit program so that you only have to collect the evidence for those controls once.

##### Comment Metadata
- Posted at: about 5 years ago
- Author title: IT Security Sherpa



### Comment 2

Your understanding is correct.  A good reason to use Tugboat Logic is that it helps you leverage and apply the work you did on one framework (i.e. ISO 27001) to other frameworks (i.e. PCI DSS). So do things once, and leverage them over and over again. It’s your data after all!  Let us know if you have any other questions.


##### Comment Metadata
- Posted at: over 5 years ago
- Author title: VP Marketing




## Related Product
[OneTrust Tech Risk & Compliance](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews)

## Related Category
[Security Compliance](https://www.g2.com/categories/security-compliance)

## Related discussions
- [How well does Trello scale into a larger team?](https://www.g2.com/discussions/1-how-well-does-trello-scale-into-a-larger-team)
  - Posted at: about 13 years ago
  - Comments: 6
- [Can we please add a new section](https://www.g2.com/discussions/2-can-we-please-add-a-new-section)
  - Posted at: about 13 years ago
  - Comments: 0
- [Quantifiable benefits from implementing your CRM](https://www.g2.com/discussions/quantifiable-benefits-from-implementing-your-crm)
  - Posted at: about 13 years ago
  - Comments: 4