Where the text comes from

Control Mapping Reader holds the text of ISO 27001:2022, ISO 27001:2013, SOC 2, HIPAA Security Rule and NIST SP 800-53 Rev 5, read clause by clause against the copy we hold. Each requirement is our statement of its clause, cited to it, not the instrument verbatim. Where a text is not held in full the page names it and does not state it.

• ISO 27001:2022 (93 controls held)
• ISO 27001:2013 (114 controls held)
• SOC 2 (61 controls held)
• HIPAA Security Rule (67 controls held)
• NIST SP 800-53 Rev 5 (1014 controls held)

The reviewed pairs and their coverage are on the reviewed pairs page. Held text read 10 Oct 2026.