Main concepts of the mapping feature
One common challenge when dealing with audits is about being able to reuse your assessment on one framework to move to a different one. This commonly refered to as mapping or crosswalk between standards.
Mappings are essentially a representation of the links between assessable nodes of a framework, and for which we are using the convention documented on NIST's OLIR project.
To create yours, you can follow one of the examples on /tools
or bootstrap a starter using the prepare_mapping
script.
To apply a mapping, you needt to first load a mapping from the library. Then, head to your audit and click on apply mapping
and select the targeted framework and see the projected being created ✨.
Note: the apply mapping feature can also be reused to clone the audit and create a new revision, if the same framework and same scope are selected.