TheArtOfService
Cross-Framework Mapping

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)vsEU GMP Annex 11: Computerised Systems

See exactly how AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) controls map to EU GMP Annex 11: Computerised Systems. Pre-computed mappings, identified gaps, and coverage analysis.

12
Controls Mapped
13
Gaps Found
40%
Coverage

According to the TheArtOfService Compliance Knowledge Graph:

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) maps to EU GMP Annex 11: Computerised Systems with 40% coverage across 10 directly mapped controls. Analysis of 25 AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) controls identifies 15 compliance gaps — primarily concentrated in Incident Response and Recovery.

Source: TheArtOfService Knowledge Graph | 25 controls analysed | 693 frameworks | 819K+ cross-framework mappings

Control Mappings

Showing 12 of 12 mapped controls across 4 domains. Sign up to explore all 819K+ mappings across 693 frameworks.

Security Management and Governance(4 mappings)

AWWA-1.1Security Policy and Governance3 targets
→Clause 10Change and configuration management
→Clause 2Personnel
→Clause 3Suppliers and service providers
AWWA-1.2Risk Assessment
→Clause 1Risk management

Access Control and Identity Management(2 mappings)

AWWA-2.1User Access Management
→Clause 12Security
AWWA-2.4Physical Access Controls
→Clause 12Security

System Security and Operations(2 mappings)

AWWA-4.3Configuration Management
→Clause 10Change and configuration management
AWWA-4.4Audit Logging and Monitoring
→Clause 9Audit trails

Incident Response and Recovery(4 mappings)

AWWA-5.1Incident Response Plan
→Clause 13Incident management
AWWA-5.3Business Continuity and Disaster Recovery
→Clause 16Business continuity
AWWA-5.5Exercises and Testing
→Clause 13Incident management
ICS-IR-2ICS-specific forensics
→Clause 13Incident management

Related Comparisons

Other AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) comparisons

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) vs CISA ICS-CERT Advisories and Industrial Control Systems Security Guidelines18 mappingsAWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) vs CSA CCM v418 mappingsAWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) vs FAA Cybersecurity Framework for Aviation18 mappingsAWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) vs ASD Information Security Manual (ISM)18 mappingsAWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) vs South Korea ISMS-P18 mappingsAWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) vs NIST SP 800-82 Rev 3 — Guide to OT Security17 mappingsAWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) vs TISAX — Trusted Information Security Assessment Exchange17 mappingsAWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) vs Azure Security Benchmark16 mappings

Other EU GMP Annex 11: Computerised Systems comparisons

CFTC System Safeguards (17 CFR 37, 38, 39, 49) vs EU GMP Annex 11: Computerised Systems8 mappingsASIC Cyber Resilience Good Practices vs EU GMP Annex 11: Computerised Systems8 mappingsCSA STAR (Security, Trust, Assurance, and Risk) vs EU GMP Annex 11: Computerised Systems8 mappingsFTC GLBA Safeguards Rule (16 CFR Part 314) vs EU GMP Annex 11: Computerised Systems8 mappingsSouth Korea ISMS-P vs EU GMP Annex 11: Computerised Systems8 mappingsASD Information Security Manual (ISM) vs EU GMP Annex 11: Computerised Systems8 mappingsPAS 1192-5:2015 — Security-Minded Approach to BIM and Digital Built Environments vs EU GMP Annex 11: Computerised Systems8 mappingsCanada ITSG-33 — IT Security Risk Management vs EU GMP Annex 11: Computerised Systems8 mappings

Stop Paying Consultants to Read Spreadsheets

AI-powered compliance intelligence across 693 frameworks — at a fraction of consulting costs.

$0/forever

Free

  • ✓ 693 framework browser
  • ✓ Cross-framework mappings (819K+)
  • ✓ 824 compliance assessments
  • ✓ 3 AI queries & searches per day
Get Started Free
Recommended
$49/month

Professional

  • ✓ Unlimited AI Compliance Advisory
  • ✓ Unlimited full-text search
  • ✓ Framework self-assessment
  • ✓ PDF, Excel & CSV exports
Start 7-Day Free Trial →

Popular framework comparisons

NIST CSF vs NIST 800-53ISO 27001 vs NIST CSFCMMC vs NIST 800-53FedRAMP vs NIST 800-53NIST CSF vs SOC 2HIPAA vs NIST 800-53ISO 27001 vs SOC 2ISO 27001 vs ISO 27701

What are the key differences between AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) and EU GMP Annex 11: Computerised Systems?

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) has 25 controls across its framework, while EU GMP Annex 11: Computerised Systems covers 23 controls. Direct mapping analysis identifies 10 overlapping controls (40% coverage). The frameworks diverge most significantly in Incident Response and Recovery, where 5 AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) controls have no direct EU GMP Annex 11: Computerised Systems equivalent.

How many controls map between AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) and EU GMP Annex 11: Computerised Systems?

Of 25 total AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) controls, 10 map directly to EU GMP Annex 11: Computerised Systems controls — representing 40% coverage. The remaining 15 controls represent compliance gaps requiring additional documentation or compensating controls to satisfy both frameworks simultaneously.

What are the compliance gaps when mapping AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) to EU GMP Annex 11: Computerised Systems?

15 AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) controls have no direct equivalent in EU GMP Annex 11: Computerised Systems. The highest concentration of gaps is in Incident Response and Recovery with 5 unmapped controls. These gaps represent areas where additional controls, policies, or documentation must be created to achieve compliance with both frameworks.

Which control domains have the most gaps between AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) and EU GMP Annex 11: Computerised Systems?

The domain with the highest gap count is Incident Response and Recovery (5 gaps). Export the full domain-by-domain gap breakdown via the Professional tier to generate a prioritised remediation roadmap.

Related Resources

How to Map Controls Across Frameworks|Multi-Framework Compliance Guide|Compliance Glossary

This platform provides educational compliance tools, not legal, regulatory, or professional compliance advice. Cross-framework mappings are AI-assisted interpretations and do not reproduce or replace official standards. Framework names and trademarks belong to their respective owners. Consult qualified professionals for your specific compliance requirements. See our Terms of Service.