The Crosswalk Library

Every NIST CSF 2.0 subcategory, mapped to NIST SP 800-53 Rev. 5. Identifier-only informative references drawn from NIST CPRT/OLIR. Free, ungated, no email required. More framework mappings are being added.

CSF 2.0 → NIST SP 800-53 Rev. 5 (106)

DE.AE-02 DE.AE-03 DE.AE-04 DE.AE-06 DE.AE-07 DE.AE-08 DE.CM-01 DE.CM-02 DE.CM-03 DE.CM-06 DE.CM-09 GV.OC-01 GV.OC-02 GV.OC-03 GV.OC-04 GV.OC-05 GV.OV-01 GV.OV-02 GV.OV-03 GV.PO-01 GV.PO-02 GV.RM-01 GV.RM-02 GV.RM-03 GV.RM-04 GV.RM-05 GV.RM-06 GV.RM-07 GV.RR-01 GV.RR-02 GV.RR-03 GV.RR-04 GV.SC-01 GV.SC-02 GV.SC-03 GV.SC-04 GV.SC-05 GV.SC-06 GV.SC-07 GV.SC-08 GV.SC-09 GV.SC-10 ID.AM-01 ID.AM-02 ID.AM-03 ID.AM-04 ID.AM-05 ID.AM-07 ID.AM-08 ID.IM-01 ID.IM-02 ID.IM-03 ID.IM-04 ID.RA-01 ID.RA-02 ID.RA-03 ID.RA-04 ID.RA-05 ID.RA-06 ID.RA-07 ID.RA-08 ID.RA-09 ID.RA-10 PR.AA-01 PR.AA-02 PR.AA-03 PR.AA-04 PR.AA-05 PR.AA-06 PR.AT-01 PR.AT-02 PR.DS-01 PR.DS-02 PR.DS-10 PR.DS-11 PR.IR-01 PR.IR-02 PR.IR-03 PR.IR-04 PR.PS-01 PR.PS-02 PR.PS-03 PR.PS-04 PR.PS-05 PR.PS-06 RC.CO-03 RC.CO-04 RC.RP-01 RC.RP-02 RC.RP-03 RC.RP-04 RC.RP-05 RC.RP-06 RS.AN-03 RS.AN-06 RS.AN-07 RS.AN-08 RS.CO-02 RS.CO-03 RS.MA-01 RS.MA-02 RS.MA-03 RS.MA-04 RS.MA-05 RS.MI-01 RS.MI-02

Bayou Bytes
One email each Tuesday: the week’s threats that matter, one copy-paste hardening step, and the script to explain it to a non-technical stakeholder. Free, no pitch.

© The Security Gator LLC · These mappings are informative references and a practical starting point — not a compliance determination, audit opinion, or legal advice. Mapping strength varies by environment; review and adapt every mapping to your organization and obligations with a qualified professional. · Source: NIST CSF 2.0 Informative References (CPRT/OLIR). Identifiers only — no copyrighted standard text is reproduced. Framework names and control identifiers are the property of their respective owners. · thesecuritygator.com