🎯 Framework Crosswalks Are Here: Map ISO to Any Compliance Standard

[dbarzin]

We just merged support for generic framework crosswalks — a major capability unlock for multi-framework deployments.

What changed

Deming now lets you map relationships between any compliance frameworks without hardcoding. Define equivalent, covers, covered_by, partial, supports, or related connections with optional coverage levels (full, high, medium, low), and track provenance and confidence metadata on every mapping.

We've included a 281-relation ReCyF 2.5 ↔ ISO 27001 workbook built from ANSSI-published comparators—auditable, transparent, with every row traced back to source. Import via XLSX with dry-run validation; export your custom mappings; view forward and inverse crosswalks side-by-side.

Why this matters

• French orgs: Map ISO to ReCyF, SecNumCloud, HDS, PSSI-G without reimporting controls
• Multi-mandate teams: Single control source; multiple framework lenses
• Compliance teams: See what NIS2 actually covers relative to your existing ISO workbook—before you reorganize

See also : comparateur ANSSI et présentation du ReCyF et du comparateur.