Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create mapping between controls of the various frameworks #32

Open
bmarsh9 opened this issue Jan 31, 2023 · 4 comments
Open

Create mapping between controls of the various frameworks #32

bmarsh9 opened this issue Jan 31, 2023 · 4 comments
Labels
enhancement New feature or request good first issue Good for newcomers hard p2

Comments

@bmarsh9
Copy link
Owner

bmarsh9 commented Jan 31, 2023

Ideally if you complete a SOC2 project, you should be able to automatically map it to the other frameworks and see what controls are already satisfied/missing

@bmarsh9 bmarsh9 added enhancement New feature or request hard p2 labels Jan 31, 2023
@sbrunston
Copy link

opensourceGRC has a public mapping across several frameworks (does not include SOC), CIS also has several mappings (includes SOC)
https://www.opensourcegrc.org/compliance-requirements
https://www.cisecurity.org/controls/cis-controls-navigator/

@bmarsh9
Copy link
Owner Author

bmarsh9 commented Feb 2, 2023

Thanks - that looks like a good place to explore

@bmarsh9 bmarsh9 moved this to In Progress in Gapps Board Feb 2, 2023
@bmarsh9 bmarsh9 added the good first issue Good for newcomers label Feb 2, 2023
@bmarsh9 bmarsh9 moved this from In Progress to Todo in Gapps Board Mar 1, 2023
@RootMePLS
Copy link

As an idea, provide an interface to do this through UI, it's more flexible to the users.

@NoahJaehnert
Copy link

Similar to opensourceGRC, the Secure Controls Framework has also premapped one to many different security/compliance frameworks together: https://securecontrolsframework.com/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request good first issue Good for newcomers hard p2
Projects
Status: Todo
Development

No branches or pull requests

4 participants