Cybersecurity Framework Mapper
Map controls and requirements across HIPAA, PCI DSS, NIST CSF, SOC 2, ISO 27001, and FTC Safeguards. Identify exact matches, partial overlaps, and gaps so you can satisfy multiple frameworks with shared evidence.
Weighted score: Exact (100%), Superset (80%), Partial (70%), Subset (50%), Related (30%)
How to Use This Mapper
Select Your Frameworks
Choose the framework you are currently compliant with as the source, and the new framework you need to map to as the target.
Review the Mapping
Each row shows how a specific control maps across frameworks. Look for Exact Matches to reuse evidence, and Partial overlaps to identify gaps.
Export & Plan
Export the full mapping for your compliance documentation. Use the coverage score and gap analysis to prioritize your remediation roadmap.
Understanding Relationship Types
Controls are directly equivalent and satisfy both requirements with one implementation.
Controls overlap but each framework has additional unique requirements.
Source control is broader and covers the target requirement plus additional scope.
Source control is narrower and only partially satisfies the target requirement.
Controls are contextually related but address different aspects of the same domain.
Cybersecurity Awareness
Annual baseline training for every employee, in any industry
Every framework you mapped shares one common control: employee security awareness. This is the single course they all expect.
Free to use this tool, no signup required. Training is billed per seat, annually.