GRC work sample · Control Mapping

NIST SP 800-53 Rev 5 → ISO/IEC 27001:2022 → SOC 2 Crosswalk

An interactive crosswalk of every NIST SP 800-53 Rev 5 base control across all 20 families, with a plain-English explanation and its principal ISO 27001:2022 Annex A and SOC 2 Trust Services Criteria counterparts. Click any ISO or SOC 2 reference to run a reverse lookup.

Prepared by David BensonNIST 800-53 Rev 5ISO/IEC 27001:2022 Annex AAICPA TSC 2017 (rev. 2022)
NIST
Control & what it means
ISO 27001:2022
SOC 2 TSC