oscal-control-mapper

What problem does it solve?

Cross-framework control mappings are often manual, opaque, and error-prone, making audits and migrations slow and risky.

Core Features & Use Cases

• Create OSCAL 1.2.0 control-mapping documents that express relationships between source and target controls (e.g., NIST 800-53 to ISO 27001).
• Define relationship types (equal, subset, superset, intersects, not-equal) and capture mapping rationales and notes.
• Import authoritative catalogs, organize mappings into sets, and generate machine-readable documents suitable for auditors and tooling.
• Typical use cases include multi-framework compliance, framework migration, and vendor control correlation.

Quick Start

Map source and target framework controls using authoritative catalogs and generate a mapped OSCAL control-mappings document.