GRC Oversight
Glossary

Cross-mapping

Reusing one passing test across the multiple frameworks whose requirements it satisfies.

Because many frameworks require similar things (encrypt data at rest, log admin access, review access quarterly), a single underlying requirement can be linked to several frameworks. Cross-mapping means one test result counts as evidence everywhere that requirement applies, instead of collecting the same proof multiple times.

Looking for another term or the full list?