Map security controls to the NIST CSF
Drafts a crosswalk of existing written IT procedures to NIST CSF functions and lists unmapped areas.
Human in the loop: Security lead reviews and owns the crosswalk. Limits: Documentation-only; does not verify controls work. Methodology 1.0: Hold.
How to run: Map security controls to the NIST CSF
- Drafts a crosswalk of existing written IT procedures to NIST CSF functions and lists unmapped areas.
- Security lead reviews and owns the crosswalk.
- Documentation-only; does not verify controls work.
Our approach