Standards we are mapping to

Status for every row below: in progress. None is a claim of compliance or certification. Control content is imported as machine-readable catalogs where they exist, not retyped.

Standard	Notes	Status
NIST SP 800-53 Rev 5 (Low, Moderate, High)	Official OSCAL; baseline source for the rest	In progress
NIST SP 800-171 Rev 3, 800-172 Rev 3, CSF 2.0, SP 800-218	Official OSCAL	In progress
FedRAMP (Consolidated Rules for 2026)	Certification Classes A to D; no OSCAL baseline published	In progress; not authorized
GovRAMP, TX-RAMP, CJIS Security Policy	State and local; no OSCAL published	In progress
CMMC (32 CFR 170)	Levels map to NIST 800-171/172	In progress
HIPAA Security Rule	Amendments proposed, not final	In progress
PCI DSS v4.0.1	No official OSCAL	In progress
ISO/IEC 27001:2022, SOC 2, CSA CCM v4	Crosswalk through 800-53	In progress
NIST SP 800-63-4, FIPS 140-3	Identity assurance and cryptography	In progress

Not yet researched: SOX, GLBA, GDPR. DoD SRG and some state program manuals could not be retrieved, so they are not summarized.