Skip to main content

Cybersecurity Framework Mapping

A mapping exercise connecting control requirements across ISO 27001, NIST CSF, and CIS Controls.

Organization
Cybersecurity Internship Portfolio
Duration
2 weeks
Project Type
Framework Mapping
ISO 27001NIST CSFCIS Controls

Objective

Compare major cybersecurity frameworks and recommend appropriate adoption strategies.

ISO 27001NIST CSFCIS Controls

Step-by-Step Execution

  1. Step 1

    Studied Frameworks

    • Studied ISO/IEC 27001, CIS Controls v8.1, and NIST CSF 2.0.

  2. Step 2

    Conducted Cross-Mapping

    • Compared control themes and related requirements across frameworks.

  3. Step 3

    Built Control Mapping Matrix

    • Built a control mapping matrix for framework comparison.

  4. Step 4

    Produced Framework Recommendation Report

    • Prepared recommendations for practical framework adoption.

Deliverables

Compliance

Control Mapping Matrix

Mapping matrix comparing ISO/IEC 27001, CIS Controls v8.1, and NIST CSF 2.0.

Reduces duplicated effort and clarifies overlapping control expectations.

Governance Strategy

Framework Recommendation Report

Report recommending appropriate framework adoption strategies.

Helps organizations choose a practical framework path.

Skills & Insights Gained

Comparative framework analysisSecurity governanceFramework implementation strategy

Continue exploring

Governance

Governance Policy Development

A structured policy development engagement aligning security expectations with business objectives and recognized frameworks.

ISO 27001NIST CSFCIS Controls
View case study

Internal Audit

Internal Cybersecurity Audit

An internal assessment that reviewed security controls, documented gaps, and produced a prioritized remediation roadmap.

NIST CSFCIS ControlsISO 27001
View case study

Risk Management

Enterprise Risk Assessment

A risk assessment project documenting assets, threats, likelihood, impact, and treatment options for management review.

CIS RAMNIST CSFISO 27001
View case study