GAISSF™ to ISO/IEC 23894 Crosswalk

ID GAISSF-CRO-021 Framework GAISSF™ Type Crosswalk

Read this first. A crosswalk records a documented correspondence under stated criteria. It does not establish compliance, equivalence, endorsement or certification.

What it coversGAISSF-CRO-021 maps the 59-control GAISSF™ v1.0 catalogue to the publicly verifiable structure of ISO/IEC 23894:2023.

Use it whenThis report provides a controlled crosswalk for aligning GAISSF control implementation with AI risk-management activities, reusing qualified risk evidence, identifying residual technical validation and planning future full-text re-verification.

Scope and limitsThe complete licensed text was not available. The mapping therefore does not claim full-text verification, conformity, certification or equivalence.

Edition mappedISO/IEC 23894:2023

Revision history

Date (as stated)	Event	What changed
2026	Publication	Published as v1.2Source: Page metadata (/crosswalks/cro-021-cro-021/)
5 October 2026	Document revision	v1.2 Draft for Publication, source-bounded: structure confirmed from the ISO record and authorised preview; semantic mappings pending licensed full-text reviewSource: GAISSF-CRO-021_GAISSF-ISO-IEC-23894-Mapping_v1.2.pdf
7 October 2026	File correction	Section 6: "Certification-grade evidence" changed to "Assessment evidence", matching GAISSF-NOR-001 section 6 (document date unchanged: "Updated 5 October 2026")Source: GAISSF-CRO-021_GAISSF-ISO-IEC-23894-Mapping_v1.2.pdf

Website record last updated 7 October 2026. This is the web page, not the document.

More from GAISSF™

SEC-047	GAISSF™ Telecommunications Sector Implementation Guide
NOR-001	GAISSF™ Framework Standard
NOR-002	GAISSF™ Executive Summary
NOR-003	GAISSF™ Quick Start Guide

Cite this document
ODA3 Institute. GAISSF™ to ISO/IEC 23894 Crosswalk (GAISSF-CRO-021), v1.2. Published 2026. docs.oda3.org/documents/cro-021/

Report a correction or ask about this publication

Document record

Issue: Current
Version: 1.2
Published: 2026
Status: Draft for Publication — Public — External Review Open
Last document revision: 7 October 2026 (section 6 wording corrected)
Replaces: None recorded
Access: Public
Licence: Not stated

Draft for Publication, public and in full. Source-bounded: the clause structure of ISO/IEC 23894:2023 is confirmed from the ISO record and an authorised preview; detailed mappings are analytical until a licensed full text is reviewed. Independent crosswalk review is open.

Access says who can obtain the document. What you may do with it is set by the licence.

Download Full crosswalk (PDF) (PDF)Read in browser Download Executive brief (PDF) (PDF)Download Mapping dataset (JSON) (JSON)Download Mapping register (XLSX) (XLSX)