Crosswalk checklist
- Control restated in one sentence; bundled obligations split XW-003
- Best-matching row chosen and recorded XW-003
- Clause recorded for each of the four frameworks, or "no direct equivalent" XW-003
- Gaps listed with what each framework's auditor would expect XW-025
- Unmatched controls raised as proposed new rows XW-025
- Mapping reviewed by a second person and dated XW-020