HRM-GOV-07Term
Standards crosswalk
A table that maps each risk domain, signal and maturity level to NIST CSF 2.0, MITRE ATT&CK, CIS Controls v8.1, ISO/IEC 27001:2022 and CMMC 2.0, so a program can report in the language its auditor already uses.
Example
An auditor asks for ISO/IEC 27001 evidence and the program owner exports the Annex A view of the same scorecard.
Related terms
4"Standards crosswalk" (HRM-GOV-07), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/standards-crosswalk
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.