ProductsModulesPricingBlogAbout PL Log in See demo
Module / Maturity

Maturity Model. ISO 27001, NIST CSF, ISO 42001 in one overlay.

Many organisations try to implement ISO 27001 and NIST CSF in parallel, maintaining two registers of the same controls. RealSec cross-maps controls: one implementation, multiple frameworks reported simultaneously.

01 / Cross-mapping kontroli

One control. Multiple frameworks.

A.5.1 from ISO 27001 is the same as GV.OC-01 from NIST CSF and 5.2 from ISO 42001. Implement once, report across three standards simultaneously. Mapping is based on public crosswalks from NIST and CIS.

  • ISO 27001Annex A (93 controls)
  • NIST CSF 2.0GV / ID / PR / DE / RS / RC
  • ISO 42001AI Management System (35 controls)
  • CIS V818 categories (mapped to ISO)
02 / Gap analysis

Coverage heatmap: where you are, where you want to be.

Every control has a current level (0-5) and a target level. A per-domain heatmap shows the gaps. Drill down to specific controls with action plan, owner and deadline.

  • CMMCapability Maturity Model 0-5
  • TARGETPer control, not just per framework
  • GAPAuto-prioritization based on risk
03 / Roadmap improvement

Gantt-style timeline with named owners.

Turn gap analysis into a concrete plan: which control, in which quarter, who is responsible, how much budget. Export to Excel for the board, JSON for integration with PM tools.

  • PHASESQuick wins / strategic / long-term
  • BUDGETCAPEX + OPEX per control
  • OWNERPer control + per phase
FAQ

Najczęstsze pytania

Because the same control recurs across multiple standards. A.5.1 from ISO 27001 corresponds to GV.OC-01 from NIST CSF and a control in ISO 42001. Implement once, report across several regimes simultaneously instead of maintaining separate registers.
Capability Maturity Model, a maturity scale from 0 (none) to 5 (optimised). Each control has a current level and a target level, and the heatmap shows gaps per domain.
The target is set per control, not just per framework, and gap prioritisation is risk-driven. The closure roadmap has owners, phases and budget, and it updates as data changes.
ISO 27001 (Annex A), NIST CSF 2.0, ISO 42001 (AI Management System) and CIS Controls v8, with cross-mapping based on public crosswalks.

ISO + NIST simultaneously.

Demo on real data: cross-mapping of controls, gap analysis heatmap, roadmap export.

Umów demo →