# Understand mapping

One common challenge when dealing with audits is about being able to reuse your assessment on one framework to move to a different one. This commonly refered to as mapping or crosswalk between standards.

This capability is supported on CISO Assistant and allows the user to create a projection of the content of an audit, given that a mapping is available.\
\
Mapping are library objects that can be customized, imported and submitted to the community. To see the available ones, head to the libraries store and filter to mapping:\
\
![](https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2FVcaoDNZmmHKtwJP3BMXn%2Fimage.png?alt=media\&token=e536397a-5331-4c3d-a9d3-922e000032c6)

Mappings are essentially a representation of the links between assessable nodes of a framework, and for which we are using the convention documented on NIST's OLIR project.

Mapping is a directed graph linked a SRC framework to a TGT framework on which the nodes can have one of the following relationships:\
\
![](https://217025809-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUJGpmCYDFJNsz2CDasSm%2Fuploads%2F3vSWeC3R2bK4fBLvzQTh%2Fimage.png?alt=media\&token=71eb060c-8bb4-46e8-b103-cc74500717f1) &#x20;

To create yours, you can follow one of the examples on `/tools` or bootstrap a starter using the `prepare_mapping`script.

To apply a mapping, you needt to first load a mapping from the library. Then, head to your audit and click on `apply mapping`and select the targeted framework and see the projected being created ✨.&#x20;

Note: the apply mapping feature can also be reused to clone the audit and create a new revision, if the same framework and same scope are selected.&#x20;
