Unified Control Mapping
Definition
An organisation-specific artefact that consolidates multiple crosswalks into a single table, adds columns for the organisation's own control implementations and evidence artefacts, and tracks compliance status across all applicable frameworks in one place. It is the operational output of the cross-mapping exercise.
- Type
- Organisation-specific compliance artefact
- Consolidates
- Multiple framework-to-framework crosswalks into one table
- Adds
- Own control implementations and evidence artefacts
- Tracks
- Compliance status across all applicable frameworks
Common questions
How does unified control mapping reduce audit burden in practice?+
Instead of proving the same control separately for each framework an auditor cares about, the organisation points to one row in the mapping and its linked evidence, which can satisfy overlapping requirements in ISO 27001, SOC 2 or NIST at once.
Who typically maintains a unified control mapping inside an organisation?+
It is usually owned by the compliance or GRC function, updated whenever a control changes or a new framework is adopted, since a stale mapping can misrepresent actual coverage during an audit.
Related terms
- Control Catalogue
- A structured list of security controls, each with an identifier, a statement of intent, and (in detailed catalogues) implementation guidance. Examples include...
- Control Family
- A grouping of related controls within a catalogue. NIST SP 800-53 uses 20 families identified by two-letter codes: AC (Access Control), AU...
- Crosswalk
- A published table that aligns controls from two frameworks side by side to show which controls address the same security objective. NIST,...
- Gap Analysis
- The process of comparing what a framework requires against what an organisation has actually implemented, to identify controls that are absent, partial,...
- Implementation Group (IG)
- A CIS Controls concept that divides the 153 safeguards across three tiers by organisational size and risk profile. IG1 (56 safeguards) covers...