GRC Mappings — OLIR & OSCAL

Status: Public
Owner: Aleksei Panov

Mappings and reference materials for Governance, Risk, and Compliance (GRC) work. This repository hosts:

• Online Informative References (OLIR) mappings
  • NIST: National Online Informative References Program OLIR
• Open Security Controls Assessment Language (OSCAL) content (planned)
  • NIST: Open Security Controls Assessment Language OSCAL

Current artifacts

• CSF v2.0 ↔ PCI DSS v4.0.1 - Supportive OLIR mapping (no PCI DSS verbatim text)

Contributions

• Open Issues for specific comments (accuracy, scope, terminology).
• Use Pull Requests for concrete fixes (typos, clarifications, metadata).
• Keep discussions focused on the mapping itself; policy debates or out‑of‑scope feature requests may be ignored.

Next steps

1. Add an OSCAL representation of selected framework(s).

License

Unless noted otherwise in subfolders, content in this repo is released under CC0-1.0 (see LICENSE). This does not grant rights to any referenced third-party standard text.