Free Spreadsheet

The SOC 2 to NIST CSF Mapping Matrix

Mapping SOC 2 Trust Services Criteria to the NIST Cybersecurity Framework lets you run one control set instead of maintaining SOC 2 and NIST compliance separately. This spreadsheet maps every SOC 2 control to NIST CSF, with example rows already filled in.

• Every SOC 2 Trust Services Criteria control mapped to NIST CSF
• Example rows already filled in to model your own on
• A starting structure for running SOC 2 and NIST CSF off one control set
• Import-ready for a GRC tool or a plain spreadsheet