https://www.razil.io https://www.razil.io/post/nist-csf-2-0-to-iso-27001-2022-annexure-a-mapping We recently conducted a NIST CSF 2.0 capability assessment for a client and, as part of the engagement, needed to map their existing... <div data-rss-type="text"> <p> <span>  We recently conducted a NIST CSF 2.0 capability assessment for a client and, as part of the engagement, needed to map their existing framework, ISO 27001:2022. Despite extensive searching, we were unable to find an existing mapping. We even tried using ChatGPT and Gemini for assistance, but both produced significant AI hallucinations. As a result, we undertook the task ourselves. <br/> </span> </p> </div> <div data-rss-type="text"> <p> <span>  To save others time, we’ve attached the NIST CSF 2.0 to ISO 27001:2022 Annexure A mapping to this post. Please use it at your own <br/> discretion and assess its completeness. <br/> </span> </p> </div> <div data-rss-type="text"> <p> <span>  A big thanks to Iris, Brad, Akshaye and Purab for their hard work in compiling this mapping.  <br/> </span> </p> </div> <div data-rss-type="text"> <p> <span> Note 24 April 2025: A new mapping has been uploaded to meet NIST OLIR requirements </span> </p> <p> <span>  Note 23 May 2024: A new mapping has been uploaded to address some previous mapping issues.  </span> </p> <p> <span> <br/> </span> </p> </div> Tue, 21 May 2024 00:35:00 GMT https://www.razil.io/post/nist-csf-2-0-to-iso-27001-2022-annexure-a-mapping