Framework overlap

Does NIST SP 800-190 cover ISO 20400:2017?

You hold NIST SP 800-190 and have been told to do ISO 20400:2017. Here is how much overlaps, control by control.

18% of ISO 20400:2017 you already have

NIST SP 800-190 already covers about 18% of ISO 20400:2017, leaving 33 of 40 controls as genuinely new work.

Already covered 2 Likely covered 5 New work 33

What is genuinely new work

Nothing in NIST SP 800-190 reaches these. This is the list to scope.

ISO-20400-4.1
Concept of sustainable procurement
ISO-20400-4.3
Core subjects of sustainable procurement
ISO-20400-4.4
Drivers for sustainable procurement
ISO-20400-5.1
Commitment from leadership
ISO-20400-5.2
Aligning procurement with organizational objectives
ISO-20400-5.3
Measuring and improving sustainable procurement performance
ISO-20400-5.4
Stakeholder engagement in procurement strategy
ISO-20400-6.1
Governance and management systems
ISO-20400-6.2
Building capacity and competence
ISO-20400-6.3
Engaging suppliers on sustainability
ISO-20400-6.4
Cross-functional collaboration
ISO-20400-7.1
Planning
ISO20400-4.1
Understanding the fundamentals of sustainable procurement
ISO20400-4.2
Core subjects of sustainability
ISO20400-4.3
Drivers for sustainable procurement
ISO20400-4.4
Key considerations for sustainable procurement
ISO20400-5.1
Policy and strategy commitment
ISO20400-5.2
Clarifying accountability
ISO20400-5.3
Aligning procurement with organisational objectives
ISO20400-5.4
Stakeholder engagement
ISO20400-5.5
Setting priorities
ISO20400-5.6
Measuring and improving performance
ISO20400-6.1
Governing procurement
ISO20400-6.2
Enabling people
ISO20400-6.3
Identifying and engaging stakeholders
ISO20400-6.4
Setting procurement priorities
ISO20400-6.5
Measuring and improving procurement performance
ISO20400-6.6
Establishing a grievance mechanism
ISO20400-7.1
Planning the procurement process
ISO20400-7.2
Integrating sustainability into specifications
ISO20400-7.3
Selecting suppliers
ISO20400-7.4
Managing the contract
ISO20400-7.5
Reviewing and learning from the contract
Show the 7 you already have
ISO-20400-4.2
Principles of sustainable procurement
ISO-20400-7.2
Integrating sustainability into specifications
ISO-20400-4.5
Key considerations for sustainable procurement
ISO-20400-6.5
Monitoring and continuous improvement
ISO-20400-7.3
Supplier selection
ISO-20400-7.4
Contract management and review
ISO-20400-7.5
Reviewing and learning

How this is calculated

Already covered means a mapping runs from a control in NIST SP 800-190 to that control. Likely covered means no direct mapping exists but both frameworks map to the same control in a third standard. New work means neither. We keep those separate rather than adding them into one friendlier number, because blending them would present a two-hop inference as a verified fact.

Coverage is not symmetric. Run it the other way and you will get a different number; both are correct.

From 332,959 cross-framework control mappings across 723 frameworks, 531 of them verified against their source documents. It does not tell you that you are compliant: a mapped control means the two standards ask for the same thing, not that you have done it.

Try another pair ยท Today's edition