Mapping CIS Controls to NIST CSF and ISO 27001/27002: Equivalents, Subsets, and Supersets

This document provides a detailed mapping of CIS Controls (v8) to the NIST Cybersecurity Framework (NIST CSF 2.0) and ISO/IEC 27001/27002 standards. It highlights equivalent controls, subsets, and supersets, facilitating a deeper understanding of their alignment. The resource is designed to support researchers, practitioners, and organizations in bridging these frameworks to enhance cybersecurity strategies and compliance efforts.

本文件详细映射了CIS控制措施（v8）与NIST网络安全框架（NIST CSF 2.0）及ISO/IEC 27001/27002标准之间的对应关系。它突出了等效控制措施、子集和超集，有助于深入理解这些框架之间的一致性。该资源旨在支持研究人员、从业者和组织衔接这些框架，以加强网络安全策略和合规工作。