Skip to main content

Using the crosswalk dataset

Hyperproof has created an extensive crosswalk dataset. You can use the dataset workbook to inspect the changes, view and download crosswalks, and add comments/suggestions.

Things to keep in mind:

  • Crosswalks are topic-based

  • Requirements are based on the Secure Controls Framework (SCF)

  • If two requirements share the same topic, Hyperproof considers them to be related

  • Hyperproof does not map individual frameworks, e.g. SOC 2 to ISO 27001. Instead, Hyperproof separately maps a framework (e.g. SOC 2) to a set of topics and another framework (e.g. ISO 27001) to the same set of topics. Any requirements that share the same topic are considered to be related.

To use the crosswalk dataset workbook:

  1. Open the workbook.

  2. In the left column, select up to 10 frameworks to see how requirements and controls are mapped across those frameworks.

    Note

    This may take three or more seconds to process due the large amount of data points.

  3. Once the data has loaded, filter columns as needed. Note that blank cells indicate that the framework does not map to that topic.

  4. Select the Change Log tab to view the differences between previous and current mappings.

Tip

If there is a mapping you disagree with, comments can be added to the workbook. Because this is a topic-based mapping, it’s necessary to identify the topic incorrectly mapped to the requirement (or missing a requirement that should be classified to that topic).

For example, if you do not think SOC 2 requirement CC6.1 should map to PCI DSS 4 requirement 1.3.3, you must find all topics that might relate to CC6.1 and 1.3.3, and determine if CC6.1 or 1.3.3 should be removed from a topic. As long as CC6.1 and 1.3.3 share at least one topic, they will continue to be considered related.

Can I use previous mappings?

Because the new mappings are expertly reviewed updates of the original dataset, it's not recommended to use the old mappings. If you absolutely need to use the old mappings, the crosswalk dataset can be leveraged to map controls to requirements. To do so, download the old version of the crosswalk as a CSV, then in Excel/Sheets, pivot and map the data as needed to conform to the Hyperproof control import template.

Crosswalk dataset workbook video

Watch this short video about how to use the crosswalk dataset workbook.

In this section: