Main site ↗

Docs / Review process

Review process

How to comment on documents that are open for external review.

What is open for commentDocuments with the status Draft for Publication. They are listed below. Each is public and complete; its final edition will be published under the same document ID.
How to send a commentEmail contact@oda3.org with the subject “Review comment: document ID”. Name the section, state the comment and give any source you rely on.
TermsBy sending a comment you agree that ODA3 Institute may use it, in whole or in part, to improve its publications. You grant ODA3 Institute the same rights in your comment as a contributor grants under the Contributor Licence Agreement (UAIF-CLA-002), whether or not you have signed that agreement. Do not send material you are not entitled to share. ODA3 Institute is not obliged to use, acknowledge or reply to a comment. Sending a comment creates no advisory or contractual relationship and implies no endorsement.

We use your name and email only to handle your comment and, if you agree, to acknowledge you. See the Privacy page.

Substantial contributions are handled under the Contributor Licence Agreement (UAIF-CLA-002), which covers the GAISSF Ecosystem and provides for acknowledgement in ODA3’s Contributors register.

What happens nextAccepted changes are recorded in the Release notes and in each document’s revision history.

Documents open for comment

Library. Select a column heading to sort.
Actions
CRO-019GAISSF™ to ISO/IEC 42001 CrosswalkCrosswalkDraft for Publication1.0–5 Oct 2026PublicPDF ↓
CRO-020GAISSF™ to ISO/IEC 27001 CrosswalkCrosswalkDraft for Publication1.0–5 Oct 2026PublicPDF ↓
CRO-021GAISSF™ to ISO/IEC 23894 CrosswalkCrosswalkDraft for Publication1.2–7 Oct 2026PublicPDF ↓
CRO-022GAISSF™ to NIST AI RMF CrosswalkCrosswalkDraft for Publication1.029 Jun 20267 Oct 2026PublicPDF ↓
CRO-023GAISSF™ to NIST CSF 2.0 CrosswalkCrosswalkDraft for Publication1.029 Jun 20267 Oct 2026PublicPDF ↓
CRO-024GAISSF™ to OWASP LLM Top 10 CrosswalkCrosswalkDraft for Publication1.029 Jun 20267 Oct 2026PublicPDF ↓
CRO-025GAISSF™ to MITRE ATLAS CrosswalkCrosswalkDraft for Publication1.029 Jun 20266 Oct 2026PublicPDF ↓
CRO-026GAISSF™ to MITRE ATT&CK CrosswalkCrosswalkDraft for Publication1.029 Jun 20266 Oct 2026PublicPDF ↓
CRO-027GAISSF™ to EU AI Act CrosswalkCrosswalkDraft for Publication1.029 Jun 20267 Oct 2026PublicPDF ↓
CRO-028GAISSF™ to DORA CrosswalkCrosswalkDraft for Publication1.029 Jun 20267 Oct 2026PublicPDF ↓
CRO-029GAISSF™ to NIS2 CrosswalkCrosswalkDraft for Publication1.0–7 Oct 2026PublicPDF ↓
CRO-030GAISSF™ to GDPR CrosswalkCrosswalkDraft for Publication1.029 Jun 20267 Oct 2026PublicPDF ↓
CRO-031GAISSF™ to SOC 2 CrosswalkCrosswalkDraft for Publication1.0–7 Oct 2026PublicPDF ↓
CRO-032GAISSF™ to PCI DSS CrosswalkCrosswalkDraft for Publication1.0–7 Oct 2026PublicPDF ↓
CRO-033GAISSF™ to CIS Controls CrosswalkCrosswalkDraft for Publication1.0–7 Oct 2026PublicPDF ↓
CRO-034GAISSF™ to CSA CCM CrosswalkCrosswalkDraft for Publication1.029 Jun 20267 Oct 2026PublicPDF ↓
CRO-035GAISSF™ to HIPAA CrosswalkCrosswalkDraft for Publication1.029 Jun 20266 Oct 2026PublicPDF ↓
CRO-036GAISSF™ to FedRAMP CrosswalkCrosswalkDraft for Publication1.029 Jun 20267 Oct 2026PublicPDF ↓
SEC-037GAISSF™ Healthcare Sector Implementation GuideSector guidanceDraft for Publication1.01 May 20266 Oct 2026PublicPDF ↓
SEC-038GAISSF™ Financial Services Sector Implementation GuideSector guidanceDraft for Publication1.01 May 20266 Oct 2026PublicPDF ↓
SEC-039GAISSF™ Insurance Sector Implementation GuideSector guidanceDraft for Publication1.030 Jun 20265 Oct 2026PublicPDF ↓
SEC-040GAISSF™ Defence Sector Implementation GuideSector guidanceDraft for Publication1.029 Jun 20265 Oct 2026PublicPDF ↓
SEC-041GAISSF™ Government Sector Implementation GuidanceSector guidanceDraft for Publication1.030 Jun 20265 Oct 2026PublicPDF ↓
SEC-042GAISSF™ Critical Infrastructure Sector Implementation GuideSector guidanceDraft for Publication1.1–5 Oct 2026PublicPDF ↓
SEC-043GAISSF™ Education Sector Implementation GuideSector guidanceDraft for Publication1.030 Jun 20267 Oct 2026PublicPDF ↓
SEC-044GAISSF™ Energy Sector Implementation GuideSector guidanceDraft for Publication1.030 Jun 20266 Oct 2026PublicPDF ↓
SEC-045GAISSF™ Manufacturing Sector Implementation GuideSector guidanceDraft for Publication1.01 Jul 20265 Oct 2026PublicPDF ↓
SEC-046GAISSF™ Retail Sector Implementation GuideSector guidanceDraft for Publication1.01 Jul 20265 Oct 2026PublicPDF ↓
SEC-047GAISSF™ Telecommunications Sector Implementation GuideSector guidanceDraft for Publication1.06 Oct 2026 (draft publication)6 Oct 2026PublicPDF ↓
SEC-048GAISSF™ Legal Sector Implementation GuideSector guidanceDraft for Publication1.0–6 Oct 2026PublicPDF ↓
SEC-049GAISSF™ Pharmaceutical Sector Implementation GuideSector guidanceDraft for Publication1.01 Jul 20265 Oct 2026PublicPDF ↓
SEC-049AGAISSF™ Pharmaceutical Sector Executive PrimerSector guidanceDraft for Publication1.01 Jul 20265 Oct 2026PublicPDF ↓
SEC-050GAISSF™ Aerospace Sector Implementation GuideSector guidanceDraft for Publication1.030 Jun 20266 Oct 2026PublicPDF ↓
SEC-051GAISSF™ Automotive Sector Implementation GuideSector guidanceDraft for Publication1.01 Jul 20265 Oct 2026PublicPDF ↓