Sign in Get started

Crosswalk explorer

The same work, described 25+ ways

Compliance frameworks overlap enormously. They describe the same security realities in different words. Keel is built on one crosswalked control library, so a control you implement once counts toward every framework it satisfies. The numbers below aren’t a marketing estimate: each is the count of canonical Keel controls that map to both frameworks, computed straight from our authored crosswalks and guarded by a test in our codebase.

A quick note on what these counts mean: they’re the shared canonical controls in Keel’s starter library (the reusable work), not each framework’s total clause count. See any framework’s full authored control count on its framework page.

MFA
Plungers and needles: one framework per gaugeThe MFA evidence barLink the MFA evidence to its control once, and every framework that control maps to counts it. From left to right, the gauges are five of the frameworks Keel's crosswalk maps the MFA control to, with the requirements it meets in each: ISO 27001 A.8.5, SOC 2 CC6.1, PCI DSS 8.4, 8.5, HIPAA 164.312(d), NIST CSF PR.AA-03.

Shared controls at a glance

Shared canonical controls between each pair of frameworks
ISO/IEC 27001 FedRAMP Rev5 Class D FedRAMP Rev5 Class C NIST SP 800-53 FedRAMP Rev5 Class B GDPR NIST Cybersecurity Framework SOC 2 ISO 9001 NIST SP 800-171 ISO/IEC 42001 PCI DSS ESG Essentials CIS Critical Security Controls HIPAA SOX (Sarbanes-Oxley) Section 404 PIPEDA FedRAMP 20x NIST AI Risk Management Framework AI Governance Essentials FedRAMP Consolidated Rules EU AI Act COPPA US Employment Law - Federal Baseline Apple App Store Kids Category Google Play Families Amazon Appstore Child-Directed Apps
ISO/IEC 27001 Same framework 55 53 52 41 19 45 32 16 35 16 27 6 32 24 24 12 25 2 1 12 0 11 2 0 0 0
FedRAMP Rev5 Class D 55 Same framework 64 60 50 17 35 24 3 40 2 30 4 35 24 20 10 25 1 0 12 0 11 2 0 0 0
FedRAMP Rev5 Class C 53 64 Same framework 60 50 17 34 23 3 40 2 30 4 34 24 20 10 25 1 0 12 0 11 2 0 0 0
NIST SP 800-53 52 60 60 Same framework 49 17 33 24 4 41 3 29 4 30 23 21 10 25 1 0 12 0 11 2 0 0 0
FedRAMP Rev5 Class B 41 50 50 49 Same framework 17 32 22 3 36 2 28 4 27 21 19 10 22 1 0 12 0 11 2 0 0 0
GDPR 19 17 17 17 17 Same framework 17 22 1 14 0 15 4 12 17 14 22 12 1 1 4 0 13 2 2 1 0
NIST Cybersecurity Framework 45 35 34 33 32 17 Same framework 26 10 22 10 20 4 19 18 20 9 21 2 1 10 0 10 1 0 0 0
SOC 2 32 24 23 24 22 22 26 Same framework 7 20 5 19 8 15 21 27 19 15 0 1 7 0 11 2 0 0 0
ISO 9001 16 3 3 4 3 1 10 7 Same framework 2 17 1 6 1 4 6 2 4 1 1 1 0 2 0 0 0 0
NIST SP 800-171 35 40 40 41 36 14 22 20 2 Same framework 2 25 1 25 18 17 8 18 0 0 10 0 9 2 0 0 0
ISO/IEC 42001 16 2 2 3 2 0 10 5 17 2 Same framework 0 1 0 2 5 0 3 14 13 1 9 1 0 0 0 0
PCI DSS 27 30 30 29 28 15 20 19 1 25 0 Same framework 3 22 18 16 9 19 0 0 8 0 10 2 0 0 0
ESG Essentials 6 4 4 4 4 4 4 8 6 1 1 3 Same framework 2 4 7 6 2 1 1 0 0 2 5 0 0 0
CIS Critical Security Controls 32 35 34 30 27 12 19 15 1 25 0 22 2 Same framework 16 13 8 19 0 0 9 0 8 1 0 0 0
HIPAA 24 24 24 23 21 17 18 21 4 18 2 18 4 16 Same framework 16 16 14 0 0 5 0 10 2 0 0 0
SOX (Sarbanes-Oxley) Section 404 24 20 20 21 19 14 20 27 6 17 5 16 7 13 16 Same framework 9 15 0 1 6 0 9 1 0 0 0
PIPEDA 12 10 10 10 10 22 9 19 2 8 0 9 6 8 16 9 Same framework 7 0 1 3 0 6 2 0 0 0
FedRAMP 20x 25 25 25 25 22 12 21 15 4 18 3 19 2 19 14 15 7 Same framework 1 0 9 0 8 1 0 0 0
NIST AI Risk Management Framework 2 1 1 1 1 1 2 0 1 0 14 0 1 0 0 0 0 1 Same framework 13 0 7 0 0 0 0 0
AI Governance Essentials 1 0 0 0 0 1 1 1 1 0 13 0 1 0 0 1 1 0 13 Same framework 0 10 0 0 0 0 0
FedRAMP Consolidated Rules 12 12 12 12 12 4 10 7 1 10 1 8 0 9 5 6 3 9 0 0 Same framework 0 3 0 0 0 0
EU AI Act 0 0 0 0 0 0 0 0 0 0 9 0 0 0 0 0 0 0 7 10 0 Same framework 0 0 0 0 0
COPPA 11 11 11 11 11 13 10 11 2 9 1 10 2 8 10 9 6 8 0 0 3 0 Same framework 1 6 5 3
US Employment Law - Federal Baseline 2 2 2 2 2 2 1 2 0 2 0 2 5 1 2 1 2 1 0 0 0 0 1 Same framework 0 0 0
Apple App Store Kids Category 0 0 0 0 0 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 6 0 Same framework 7 4
Google Play Families 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 5 0 7 Same framework 5
Amazon Appstore Child-Directed Apps 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 3 0 4 5 Same framework

Each cell is the number of canonical Keel controls shared by the two frameworks. Click a number to see exactly which controls, and the clauses they satisfy on each side.

Every overlapping pair

Start free: apply a second framework

No credit card. Watch how much of your next framework your existing controls already cover.