Published by ODA3 InstituteGAISSF™ to CIS Controls Crosswalk
ID GAISSF-CRO-033
Framework GAISSF™ Type Crosswalk
Read this first. A crosswalk records a documented correspondence under stated criteria. It does not establish compliance, equivalence, endorsement or certification.
What it coversThe crosswalk compares GAISSF control outcomes with the 18 CIS Control families.
Scope and limitsRelationship and confidence ratings are analytical judgments only; they do not establish implementation, assessment results, evidence sufficiency, operating effectiveness or equivalence.
Edition mappedCIS Controls v8.1
Revision history
| Date (as stated) | Event | What changed |
|---|---|---|
| 2026 | Publication | Published as v1.0Source: Page metadata (/crosswalks/cro-033-cis-controls/) |
| 6 October 2026 | Document revision | Draft for Publication issued, public and in full; independent crosswalk review openSource: GAISSF-CRO-033_GAISSF-CIS-Controls-Mapping_v1.0.pdf |
| 7 October 2026 | File correction | Website summary: list of publication files now names the files published here (PDF, XLSX, JSON); DOCX and Markdown entries removed (document date unchanged)Source: GAISSF-CRO-033_GAISSF-CIS-Controls_Website-Summary_v1.0.pdf |
Website record last updated 7 October 2026. This is the web page, not the document.
More from GAISSF™
| SEC-047 | GAISSF™ Telecommunications Sector Implementation Guide |
| NOR-001 | GAISSF™ Framework Standard |
| NOR-002 | GAISSF™ Executive Summary |
| NOR-003 | GAISSF™ Quick Start Guide |
Cite this document
ODA3 Institute. GAISSF™ to CIS Controls Crosswalk (GAISSF-CRO-033), v1.0. Published 2026. docs.oda3.org/documents/cro-033/
ODA3 Institute. GAISSF™ to CIS Controls Crosswalk (GAISSF-CRO-033), v1.0. Published 2026. docs.oda3.org/documents/cro-033/