---
title: NIST Cybersecurity Resources | Spreadsheets | Crosswalking | Reporting
description: Click here to discover essential resources and references guides related to NIST frameworks and crosswalking.
---

[NIST ](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary)

# [NIST Cybersecurity Resources | Spreadsheets | Crosswalking | Reporting](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary/nist-resources)

 Written by [David Quaid](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary/author/david-quaid) | Jul 12, 2024 3:15:40 PM

## NIST Cybersecurity Table of Content

1. [NIST Resources](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary/nist-resources?hs_amp=true#NISTR-A)
2. [NIST Privacy and Security Topics ](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary/nist-resources?hs_amp=true#NISTR-B)
3. [NIST Publications ](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary/nist-resources?hs_amp=true#NISTR-C)
4. [NIST Crosswalk Resources ](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary/nist-resources?hs_amp=true#NISTR-D)
5. [NIST CSF Excel/Spreadsheets](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary/nist-resources?hs_amp=true#NISTR-E)
6. [NIST 800-53 Resources](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary/nist-resources?hs_amp=true#NISTR-G)
7. [NIST Information Security](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary/nist-resources?hs_amp=true#NISTR-F)

## NIST Resources

| **Resource** | **Description** |
| --- | --- |
| [Guide to NIST 800-30 Methodology](https://www.cybersaint.io/cyber-risk/cyber-risk-quantification/nist-800-30-risk-assessment) | Embark on your Cyber Risk Quantification (CRQ) journey with our comprehensive guide to implementing NIST 800-30. This guide offers step-by-step instructions and insights into best practices for effective CRQ. |
| [The NIST Cybersecurity Framework Guide](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/cybersecurity-framework/what-is-the-nist-cybersecurity-framework) | Using the NIST CSF guide, you can inform your risk management strategy, determine who should have access control, and build or enhance your information security program in a cost-effective way.  |
| [NIST CSF Implementation Tiers Overview](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/nist-csf-implementation-tiers-guide) | This guide serves as your roadmap through the NIST CSF implementation tiers, helping you elevate your cybersecurity framework strategically. |
| [NIST Risk Management Framework](https://www.cybersaint.io/blog/six-steps-of-the-nist-risk-management-framework) | The NIST management framework is a culmination of multiple special publications (SP) produced by the National Institute for Standards and Technology (NIST)  the 6 NIST RMF Steps. |

## NIST Privacy and Security Topics

| **Topic** | **Resources** |
| --- | --- |
| Cryptography | [ ISO 27001 Compliance Checklist](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/iso-27001/iso-27001-compliance) |
| Cybersecurity Supply Chain Risk Management | [Cybersecurity Risks to Consider in Supply Chain Management](https://www.cybersaint.io/blog/cybersecurity-in-supply-chain-management-risks-to-consider) |
| General Security and Privacy | [ Aligning Security and Privacy Using the NIST Risk  ](https://www.cybersaint.io/blog/aligning-security-and-privacy-using-the-nist-risk-management-framework)[Management Framework](https://www.cybersaint.io/blog/aligning-security-and-privacy-using-the-nist-risk-management-framework) |
| Identity and Access Management | [ NIST Cybersecurity Framework (CSF) Core Explained](https://www.cybersaint.io/blog/nist-cybersecurity-framework-core-explained) |
| Privacy | [ Aligning Security and Privacy Using the NIST Risk   Management Framework](https://www.cybersaint.io/blog/aligning-security-and-privacy-using-the-nist-risk-management-framework)  |
| Risk Management |  [What is a Risk Management Framework?](https://www.cybersaint.io/glossary/what-is-a-risk-management-framework) |
| Security and Behavior | [ How Cyber and IT Risk Quantification Tools are   Evolving for the Digital Age](https://www.cybersaint.io/blog/how-cyber-and-it-risk-quantification-tools-are-evolving-for-the-digital-age) |
| Security Measurement | [ How Risk Quantification Improves Security Posture](https://www.cybersaint.io/blog/risk-quantification-methods) |
| Security Programs and Measurement | [ How Modern Cybersecurity Risk Management   Programs Have Evolved](https://www.cybersaint.io/blog/how-modern-cybersecurity-risk-management-programs-have-evolved) |
| Systems Security Engineering | [ The CIS Top 20 Controls Explained](https://www.cybersaint.io/blog/the-cis-top-20-controls) |
| Zero Trust | [ Zero Trust Security – A Quick Guide](https://www.cybersaint.io/blog/zero-trust-security-a-quick-guide) |

## NIST Publications

| **Abbreviation** | **Description** | **Resource** |
| --- | --- | --- |
| **FIPS** | Federal Information Processing Standards | [NIST SP 800-53 Control Families Explained](https://www.cybersaint.io/blog/nist-800-53-control-families) |
| **SP** | NIST Special Publications | [What is NIST SP 800-53?](https://www.cybersaint.io/blog/what-is-nist-800-53) |
| **IR** | NIST Interagency or Internal Reports (NIST IR) | [Ultimate NIST Cybersecurity Framework Guide - Unpack the NIST CSF in 10 Minutes or Less](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/cybersecurity-framework) |
| **CSWP** | NIST Cybersecurity White Papers | [NIST Cybersecurity Framework (CSF) Core Explained](https://www.cybersaint.io/blog/nist-cybersecurity-framework-core-explained) |
| **Project** | Project Descriptions from the National Cybersecurity Center of Excellence (NCCOE) | [NIST Cybersecurity Framework (CSF) Core Explained](https://www.cybersaint.io/blog/nist-cybersecurity-framework-core-explained) |
| **ITL Bulletin** | NIST Information Technology Laboratory (ITL) Bulletins (1990-2020) | [The Top 10 Cybersecurity Dashboard Metrics Every CIO Needs to Know](https://www.cybersaint.io/blog/the-top-10-cybersecurity-dashboard-metrics-every-cio-needs-to-know) |
| **AI** | Artificial Intelligence: Al series reports that are focused on cybersecurity and privacy. | [Deep Dive: Artificial Intelligence-Driven Digital Transformation](https://www.cybersaint.io/blog/artificial-intelligence-digital-transformation) |
| **TN** | Technical Notes: Studies or reports that are very restrictive in their treatment of a subject. | [The Complete Guide To Integrated Risk Management](https://www.cybersaint.io/cybersecurity/gartner/integrated-risk-management/) |

 

## NIST Crosswalk Resources

### Overview

Crosswalks mapping the provisions of laws and regulations, standards, and frameworks to Subcategories can help organizations prioritize activities or outcomes to facilitate conformance.

**Note:** These crosswalks are intended to help organizations understand which Privacy Framework Functions, Categories, and Subcategories may be most relevant to addressing the provisions of the source document. Organizations should not assume that implementing these Privacy Framework activities or outcomes means that they have met the provisions of the source document. There may be other activities that organizations need to undertake.

## Laws and Regulations Frameworks

CyberSaint offers automated crosswalking through our AI engine, saving you time and effort compared to manually mapping controls in a spreadsheet, offering greater accuracy with our Natural Language Processing (NLP) to improve the accuracy of control mapping between frameworks by understanding the intent behind the control descriptions

| **Laws and Regulations** | **Spreadsheet Resources [xls.]** |
| --- | --- |
| [California Consumer Privacy Act (CCPA) Regulations Crosswalk by Craig Erickson](https://www.nist.gov/privacy-framework/ccpa-regulations-crosswalk) | [CCPA Regulations Crosswalk](https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fraw.githubusercontent.com%2Fusnistgov%2FPrivacyFrmwkResources%2Ffc6e0f2decedd5548659aed33a6a501b4cd2c0ee%2Fresources%2FCCPA%2520Regulations%2520Crosswalk%2FCCPA-Regs-to-SP800-53r5-to-pf-mappings.xlsx&wdOrigin=BROWSELINK) |
| [California Consumer Privacy Act (CCPA) Crosswalk by BakerHostetler](https://www.nist.gov/privacy-framework/ccpa-crosswalk-bakerhostetler) | [CCPA Crosswalk](https://github.com/usnistgov/PrivacyFrmwkResources/raw/master/resources/CCPA%20Crosswalk/NIST%20Privacy%20Framework%20to%20CCPA%20crosswalk.xlsx) |
| [California Consumer Privacy Act (CCPA) & California Privacy Rights Act (CPRA) Crosswalk by BakerHostetler](https://www.nist.gov/privacy-framework/ccpa-cpra-crosswalk-bakerhostetler) | [CCPA & CPRA Crosswalk](https://github.com/usnistgov/PrivacyFrmwkResources/raw/master/resources/CCPA-CPRA%20Crosswalk/NIST%20Privacy%20Framework%20to%20CCPA-CPRA%20crosswalk.xlsx) |
| [GDPR Crosswalk by Enterprivacy Consulting Group](https://www.nist.gov/privacy-framework/resource-repository/browse/crosswalks/gdpr-crosswalk-enterprivacy-consulting-group) | [GDPR Crosswalk](https://github.com/usnistgov/PrivacyFrmwkResources/raw/master/resources/GDPR-Regulation%202016%20679/Resource%20Privacy%20Framework%20to%20GDPR%20crosswalk.xlsx) |
| [LGPD Crosswalk by Prado Vidigal Advogados](https://www.nist.gov/privacy-framework/lgpd-crosswalk-prado-vidigal-advogados) | [LGPD Crosswalk](https://github.com/usnistgov/PrivacyFrmwkResources/raw/master/resources/LGPD%20Crosswalk/Resource%20Privacy%20Framework%20to%20LGPD%20crosswalk.xlsx) |
| [VCDPA Crosswalk by BakerHostetler](https://www.nist.gov/privacy-framework/vcdpa-crosswalk-bakerhostetler) | [VCDPA Crosswalk](https://github.com/usnistgov/PrivacyFrmwkResources/raw/master/resources/VDCPA%20Crosswalk/NIST%20Privacy%20Framework%20to%20VDCPA%20crosswalk.xlsx) |

 

Important Reminder: Spreadsheets rely on manual entry, making them prone to errors.

Note: CyberStrong integrates crosswalking with our cyber risk management platform, allowing you to leverage your crosswalked data for assessments and reporting.

### Standards

| **Standards** | **Resource** |
| --- | --- |
| [ISO/IEC 27701 Crosswalk by Microsoft](https://www.nist.gov/privacy-framework/resource-repository/browse/crosswalks/isoiec-27701-crosswalk-microsoft) | [ISO/IEC 27701 Crosswalk](https://github.com/usnistgov/PrivacyFrmwkResources/raw/master/resources/ISO%2027701%20Crosswalk%20Microsoft/NIST-Privacy-Framework-Version1-Crosswalk-ISO-IEC%2027701_Microsoft.xlsx) |

 

### Frameworks

| **Frameworks** | **Resource** |
| --- | --- |
| [American Institute of Certified Public Accountants (AICPA) 2017 Trust Services Criteria Crosswalk](https://www.nist.gov/itl/applied-cybersecurity/privacy-engineering/american-institute-certified-public-accountants-aicpa) | [AICPA 2017 Trust Services Criteria Crosswalk](https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fraw.githubusercontent.com%2Fusnistgov%2FPrivacyFrmwkResources%2Fmaster%2Fresources%2FAICPA%2520TSC%2520Crosswalk%2FNIST-Privacy-Framework-Version1-Crosswalk-AICPA-Trust-Services-Criteria-Mapping.xlsx&wdOrigin=BROWSELINK) |
| [Cybersecurity Framework Crosswalk](https://www.nist.gov/privacy-framework/resource-repository/browse/crosswalks/cybersecurity-framework-crosswalk) | [Cybersecurity Framework Crosswalk](https://github.com/usnistgov/PrivacyFrmwkResources/raw/master/resources/Cybersecurity%20Framework%20Crosswalk/Crosswalk%20Resource-%20Cybersecurity%20Framework%20to%20NIST%20Privacy%20Framework.xlsx) |
| [Fair Information Practice Principles (FIPPs) Crosswalk](https://www.nist.gov/privacy-framework/fair-information-practice-principles-fipps-crosswalk) | [FIPPs Crosswalk](https://github.com/usnistgov/PrivacyFrmwkResources/raw/master/resources/FIPPs%20Crosswalk/NIST-Privacy-Framework-Version1-Crosswalk-SLC-%20FIPPs-NIST%20PF.xlsx) |
| [International Association of Privacy Professionals (IAPP) Certified Information Privacy Manager (CIPM) Crosswalk](https://www.nist.gov/privacy-framework/iapp-cipm-crosswalk) | [IAPP CIPM Crosswalk](https://github.com/usnistgov/PrivacyFrmwkResources/raw/master/resources/IAPP%20CIPM%20Crosswalk/NIST-Privacy-Framework-V1.0-Crosswalk-IAPP-CIPM_resource.xlsx) |
| [NIST Privacy Framework and Cybersecurity Framework to NIST Special Publication 800-53, Revision 5 Crosswalk](https://nist.gov/privacy-framework/nist-privacy-framework-and-cybersecurity-framework-nist-special-publication-800-53) | [NIST Privacy Framework and Cybersecurity Framework to NIST SP 800-53 Rev 5 Crosswalk](https://github.com/usnistgov/PrivacyFrmwkResources/raw/master/resources/NIST%20SP%20800-53%20Crosswalk/csf-pf-to-sp800-53r5-mappings.xlsx) |

 

## NIST CSF Excel/Spreadsheets

| **Spreadsheet** | **Reference** |
| --- | --- |
| Control Catalog Spreadsheet | [NIST SP 800-53, Revision 5 Security and Privacy Controls for Information Systems and Organizations](https://csrc.nist.gov/CSRC/media/Publications/sp/800-53/rev-5/final/documents/sp800-53r5-control-catalog.xlsx) |
| Control Baselines Spreadsheet | [NIST SP 800-53B Control Baselines](https://csrc.nist.gov/CSRC/media/Publications/sp/800-53b/final/documents/sp800-53b-control-baselines.xlsx) |
| Analysis of updates between SP 800-53 Rev. 5 and Rev. 4 | [Analysis of updates between NIST SP 800-53 Rev. 5 and Rev. 4](https://csrc.nist.gov/CSRC/media/Publications/sp/800-53/rev-5/final/documents/sp800-53r4-to-r5-comparison-workbook.xlsx) |
| NIST Cybersecurity Framework and NIST Privacy Framework | [Cybersecurity Framework/Privacy Framework to NIST Special Publication 800-53, Revision 5 Mapping](https://csrc.nist.gov/CSRC/media/Publications/sp/800-53/rev-5/final/documents/csf-pf-to-sp800-53r5-mappings.xlsx) |
| ISO/IEC 27001 | [ISO/IEC 27001](https://csrc.nist.gov/CSRC/media/Publications/sp/800-53/rev-5/final/documents/sp800-53r5-to-iso-27001-mapping.docx) |
| NIST SP 800-171r2 Security Requirements Spreadsheet | [NIST SP 800-171r2 Security Requirements Spreadsheet](https://csrc.nist.gov/files/pubs/sp/800/171/r2/upd1/final/docs/sp800-171r2-security-reqs.xlsx) |
| Draft Cybersecurity Framework v1.1 Core | [Draft Cybersecurity Framework v1.1 Core (xlsx)](https://www.nist.gov/document/draft-cybersecurity-framework-v11-corexlsx) |
| NIST CSF 2.0 Organizational Profiles | [NIST CSF 2.0 Organizational Profiles](https://www.nist.gov/document/csf-20-notional-organizational-profile-template) |
| NIST SP 800-53 Revision 5 | [NIST SP 800-53 Revision 5](https://csrc.nist.gov/files/pubs/sp/800/53/r5/upd1/final/docs/sp800-53r5-controls.xlsx) |

 

NIST 800-53 Resources

| **Resource** | **Description** | **Link** |
| --- | --- | --- |
| NIST SP 800-53 Rev. 5 | Comprehensive security and privacy control catalog | [NIST SP 800-53 Rev. 5 PDF](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf) |
| NIST SP 800-53B | Control baselines for information systems and organizations | [NIST SP 800-53B](https://csrc.nist.gov/publications/detail/sp/800-53b/final) |
| NIST SP 800-53A | Assessment procedures for SP 800-53 controls | [NIST SP 800-53A PDF](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53Ar5.pdf) |
| Online Introductory Courses | Self-guided courses on SP 800-53, SP 800-53A, and SP 800-53B | [RMF Courses](https://csrc.nist.gov/projects/risk-management/rmf-courses) |
| Control Catalog Spreadsheet | Excel spreadsheet of the full SP 800-53 Rev. 5 control catalog | [Control Catalog Spreadsheet](https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final) |
| Control Baselines Spreadsheet | Excel spreadsheet of the SP 800-53B control baselines | [Control Baselines Spreadsheet](https://csrc.nist.gov/publications/detail/sp/800-53b/final) |
| OSCAL Version | Machine-readable version of SP 800-53 Rev. 5 controls in OSCAL format | [OSCAL Resources](https://csrc.nist.gov/projects/open-security-controls-assessment-language) |
| Mapping to Privacy Framework | Crosswalk between NIST Privacy Framework and SP 800-53 Rev. 5 | [Privacy Framework Resources](https://www.nist.gov/privacy-framework) |
| Mapping to Cybersecurity Framework | Crosswalk between NIST Cybersecurity Framework and SP 800-53 Rev. 5 | [Cybersecurity Framework Resources](https://www.nist.gov/cyberframework) |
| NIST Risk Management Framework (RMF) Guidance | Guidance on implementing the RMF with SP 800-53 controls | [NIST RMF Overview](https://csrc.nist.gov/projects/risk-management) |
| NIST Cybersecurity Framework (CSF) Guidance | Voluntary framework to manage and reduce cybersecurity risk | [Cybersecurity Framework Overview](https://www.nist.gov/cyberframework) |

 

 

## NIST Information Security

The National Institute of Standards and Technology (NIST) plays a crucial role in developing cybersecurity standards, guidelines, and best practices to meet the needs of U.S. industry, federal agencies, and the broader public. NIST's efforts in information security are comprehensive and far-reaching, focusing on several key areas.

### NIST Information Security Key Focus Areas

NIST contributes to various priority areas in information security, including:

- Cryptography
- Education and workforce development
- Emerging technologies
- Risk management
- Identity and access management
- Measurements
- Privacy
- Trustworthy networks and platforms

### Other Cybersecurity Resources

[Cybersecurity Reports Resources](https://www.cybersaint.io/cybersecurity/cybersecurity-dashboard-and-reporting/glossary/cybersecurity-reports-resources)

[FAIR Resources](https://www.cybersaint.io/cyber-risk/cyber-risk-quantification/glossary/fair-resources)

[Return to NIST Glossary](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary)

[View full post](https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary/nist-resources)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "David Quaid"
  },
  "dateModified" : "2025-05-07T12:46:24.676Z",
  "datePublished" : "2024-07-12T15:15:40Z",
  "headline" : "NIST Cybersecurity Resources | Spreadsheets | Crosswalking | Reporting",
  "image" : {
    "@type" : "ImageObject",
    "height" : 60,
    "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
    "width" : 60
  },
  "mainEntityOfPage" : "https://www.cybersaint.io/cybersecurity/frameworks-and-standards/nist/glossary/nist-resources",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "NIST "
  }
}
```