Free Workbook

The ISO 27001 to NIST CSF 2.0 Crosswalk Workbook

Mapping ISO 27001 Annex A controls to NIST CSF 2.0 lets you implement a control once and report on it twice, for the ISO certificate and for the NIST risk outcome. This workbook maps all 93 Annex A controls to their closest CSF 2.0 subcategory, then reads the mapping backwards so you can see which NIST outcomes your ISO programme leaves thin.

• All 93 ISO 27001:2022 Annex A controls mapped to a NIST CSF 2.0 subcategory
• Worked evidence and owner columns for every row, not blank cells
• The reverse view: all 22 CSF 2.0 categories with the Annex A controls that carry them
• The four gaps ISO-certified teams reliably find, and how to close each