Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines: Developing Cybersecurity and Privacy Concept Mappings

Published

February 26, 2024

Author(s)

Karen Scarfone, Murugiah Souppaya, Michael Fagan

Abstract

This document describes NIST's approach to mapping the elements of documentary standards, regulations, frameworks, and guidelines to a particular NIST publication, such as CSF Subcategories or SP 800-53r5 controls. This approach is intended to be used to map relationships involving NIST cybersecurity and privacy publications that will be submitted via the NIST National Online Informative References (OLIR) process for hosting on NIST's online Cybersecurity and Privacy Reference Tool (CPRT). The approach will provide flexibility to capture relationships for various levels of concepts and in different degrees of detail in human-consumable, machine-readable formats. The approach is informed by concept system and terminology standards, as well as experience with what information the security and privacy community would find most valuable.

Citation

NIST Interagency/Internal Report (NISTIR) - 8477

Report Number

8477

NIST Pub Series

NIST Interagency/Internal Report (NISTIR)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.IR.8477

Local Download

Keywords

concept mapping, crosswalk, cybersecurity, mapping, privacy, relationship, terminology science.

Citation

Scarfone, K. , Souppaya, M. and Fagan, M. (2024), Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines: Developing Cybersecurity and Privacy Concept Mappings, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8477, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=957319 (Accessed November 21, 2024)