The control mapping template
One artifact per row, in the columns the reader reads. Fill it in, paste it back into the reader and it places each artifact. Download it: control-mapping-template.csv.
| Artifact | Regime | Edition | Control code | Control title | Match basis | Mapped controls | Reviewed coverage |
|---|---|---|---|---|---|---|---|
| CC6.1 Logical access security over protected information assets | SOC 2 | SOC 2 | CC6.1 | Logical access security over protected information assets | control code | HIPAA Security Rule: 164.312(d); NIST SP 800-53 Rev 5: NIST800-IA-2 | ISO 27001:2022 57.4% |
| A.8.15 Logging | ISO 27001:2022 | ISO 27001:2022 | 8.15 | Logging | control code | named in the released pair | SOC 2 57.4% |
| 164.308(a)(1)(ii)(A) Risk Analysis | HIPAA Security Rule | HIPAA Security Rule | 164.308(a)(1)(ii)(A) | Risk Analysis (Required) | control code | NIST SP 800-53 Rev 5: NIST800-RA-3 | NIST SP 800-53 Rev 5 3.7% |