Home / Insights / Glossary / Crosswalking

Glossary

Crosswalking

Mapping the controls of one framework onto another so a single control answers both.

What it means

Crosswalking maps requirements across frameworks — ISO 27001 to NIST CSF to SOC 2 to a sector standard — so that one implemented control can be evidenced against several obligations at once. Without it, each framework is answered separately and the same evidence is collected repeatedly.

The mapping is straightforward to draw and hard to maintain. Frameworks revise, controls change, and a crosswalk held in a spreadsheet drifts out of date quietly.

Where MyRISK fits

What we do about it

Holding one definition that serves many requests is what MyRISK Core is for — controls, evidence, owners and reporting attached to entities you already use, so a definition agreed once can answer the next request rather than starting it again.

MyRISK Core

Is this the thing you are actually trying to fix?

A definition rarely settles it. Tell us what happened — the request, the finding, the challenge or the incident — and we will say where to start, or that it isn't us.