Framework overlap

Does SIG (Shared Assessments) cover NIST SP 800-181?

You hold SIG (Shared Assessments) and have been told to do NIST SP 800-181. Here is how much overlaps, control by control.

34% of NIST SP 800-181 you already have

SIG (Shared Assessments) already covers about 34% of NIST SP 800-181, leaving 25 of 38 controls as genuinely new work.

Already covered 0 Likely covered 13 New work 25

No control in SIG (Shared Assessments) maps directly to one in NIST SP 800-181. Everything counted as covered is covered because both map to the same third standard, which is what a crosswalk is, but it is an inference rather than a lookup.

What is genuinely new work

Nothing in SIG (Shared Assessments) reaches these. This is the list to scope.

NICE-COMP-TASKS
Component: Tasks
NICE-COMP-WORKROLES
Component: Work Roles
NICE-WM-IDENTIFY
Workforce Management: Identify Workforce Needs
NICE-WM-RECRUIT
Workforce Management: Recruit and Hire Talent
NICE.APP.EDU
Education and Training Alignment
NICE.APP.PLAN
Workforce Planning Application
NICE.CAT.AN
Analyze Category Adoption
NICE.CAT.CO
Collect and Operate Category Adoption
NICE.CAT.IN
Investigate Category Adoption
NICE.CAT.OM
Operate and Maintain Category Adoption
NICE.CAT.OV
Oversee and Govern Category Adoption
NICE.CAT.PR
Protect and Defend Category Adoption
NICE.CAT.SP
Securely Provision Category Adoption
NICE.KSA.K
Knowledge Items Tracking
NICE.KSA.S
Skill Items Tracking
NICE.TASK
Task Statements Adoption
NICE.WR.CRM
Cyber Legal Advisor Work Role
NICE.WR.IRR
Cyber Defense Incident Responder Work Role
NICE.WR.ISO
Information Systems Security Manager Work Role
NICE.WR.PME
Cyber Workforce Developer and Manager Work Role
NICE.WR.SAA
Security Control Assessor Work Role
NICE.WR.SAR
Security Architect Work Role
NICE.WR.SDA
Systems Developer Work Role
NICE.WR.SOA
Cyber Defense Analyst Work Role
NICE.WR.VAM
Vulnerability Assessment Analyst Work Role
Show the 13 you already have
NICE-CAT-AN
Category: Analyze (AN)
NICE-CAT-CO
Category: Collect and Operate (CO)
NICE-CAT-IN
Category: Investigate (IN)
NICE-CAT-OM
Category: Operate and Maintain (OM)
NICE-CAT-OV
Category: Oversee and Govern (OV)
NICE-CAT-PR
Category: Protect and Defend (PR)
NICE-CAT-SP
Category: Securely Provision (SP)
NICE-COMP-CATEGORIES
Component: Categories
NICE-COMP-KSA
Component: Knowledge, Skills, and Abilities (KSAs)
NICE-COMP-SPECIALTY
Component: Specialty Areas
NICE-COMPETENCIES
Competencies
NICE-WM-EDUCATE
Workforce Management: Educate and Train
NICE-WM-RETAIN
Workforce Management: Retain and Develop

How this is calculated

Already covered means a mapping runs from a control in SIG (Shared Assessments) to that control. Likely covered means no direct mapping exists but both frameworks map to the same control in a third standard. New work means neither. We keep those separate rather than adding them into one friendlier number, because blending them would present a two-hop inference as a verified fact.

Coverage is not symmetric. Run it the other way and you will get a different number; both are correct.

From 332,959 cross-framework control mappings across 723 frameworks, 531 of them verified against their source documents. It does not tell you that you are compliant: a mapped control means the two standards ask for the same thing, not that you have done it.

Try another pair ยท Today's edition