Free Spreadsheet

The SOC 2 to NIST CSF Mapping Matrix

Mapping SOC 2 Trust Services Criteria to the NIST Cybersecurity Framework lets you run one control set instead of maintaining SOC 2 and NIST compliance separately. This spreadsheet maps every SOC 2 control to NIST CSF, with example rows already filled in.

Every SOC 2 Trust Services Criteria control mapped to NIST CSF
Example rows already filled in to model your own on
A starting structure for running SOC 2 and NIST CSF off one control set
Import-ready for a GRC tool or a plain spreadsheet

Get the mapping matrix

Enter your work email and we'll take you straight to the download.

PDF

Company name

Work email

First name

Role

Framework(s) you're working on

Compliance stage

We check that your email domain is real and can receive mail before sending. If we can't verify it, we don't send the resource — so please use a work address rather than a forwarding or temporary one.

We're sending this to you for free, and we'd like to know who we're sending it to. By submitting this form you agree that we may contact you about Konfirmity — no more than six emails a year, and we won't ask again each time. You can unsubscribe from any of them, and we'll stop. See our Privacy Policy.