Control Mapping Utility

The Control Mapping Utility provides organizations the ability to map controls between catalogues, enabling reuse of assessment data across multiple frameworks. This reduces redundant work and simplifies the creation of crosswalked SSPs (e.g., NIST to ISO). Use it to create a single Security Plan or Assessment against one standard, and automatically align with controls from other mapped standards.

How to Use

Note: Maintainer role or higher required.

Step 1: Convert a Catalogue to a Master

1. Go to Modules > Catalogues.
2. Select the catalogue you want to map from (source).
3. In the Utility panel, select RegScale Control Mapping Options.
4. Click Mapping Conversion > Convert to enable mapping.

Step 2: Create Mappings

1. After conversion, return to the Mappings tab for the source catalogue.
2. Select Mapping Conversion > Start Mapping.
3. Follow the steps:
   • Step 1: Choose a control from the destination catalogue
   • Step 2: Select the source catalogue
   • Step 3: Drag and drop controls that satisfy the destination control
4. Use Visualize to open a spreadsheet-style view of your mappings.

Once mappings are created, you can assess against the source framework and automatically satisfy mapped controls across other standards.