The UK Security Leader's Multi-Framework Crosswalk
Thirty control domains, seven frameworks, one view.
Thirty control domains mapped across ISO/IEC 27001:2022, NIST CSF 2.0, CIS Controls v8.1, DORA, NIS 2, UK GDPR and the EU AI Act with ISO/IEC 42001:2023. Designed as a one-page wall reference for the CISO who is now reporting against four frameworks at once.
02Use this paper when
Scenarios where this paper earns its place on the desk.
- 01Building a unified control library across multiple frameworks
- 02Responding to a SOC 2 / ISO 27001 / DORA customer questionnaire
- 03Briefing a board on the overlap between frameworks
- 04Preparing for a multi-framework certification cycle
- 05Justifying control investment that satisfies more than one regime
03What you'll find inside
Artefacts and templates included with the paper.
- ARTEFACT30-domain crosswalk grid
- ARTEFACTEvidence-grade tagging
- ARTEFACTFramework overlap heatmap
- ARTEFACTAudit-cycle calendar template
AUTHOR
Paul Jolliffe
FOUNDER · INFOSECAI · MBA · CISSP · ISO 27001:2022 LA / LI / IA · PRINCE2 Practitioner
Twenty years of senior security leadership across financial services, healthcare, government, telecoms and technology. Independent UK practice founded 2025. Author of the InfoSecAI insights library.
Get The Brief: practitioner notes on what is changing.
Weekly. No tracking pixels, no marketing automation. Unsubscribe in one click.