TheArtOfService
Cross-Framework Mapping

HKMA Cyber Resilience Assessment Framework (C-RAF)vsEN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)

See exactly how HKMA Cyber Resilience Assessment Framework (C-RAF) controls map to EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS). Pre-computed mappings, identified gaps, and coverage analysis.

8
Controls Mapped
16
Gaps Found
12%
Coverage

According to the TheArtOfService Compliance Knowledge Graph:

HKMA Cyber Resilience Assessment Framework (C-RAF) maps to EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS) with 12% coverage across 3 directly mapped controls. Analysis of 24 HKMA Cyber Resilience Assessment Framework (C-RAF) controls identifies 21 compliance gaps — primarily concentrated in Domain 3: Protection.

Source: TheArtOfService Knowledge Graph | 24 controls analysed | 693 frameworks | 819K+ cross-framework mappings

Control Mappings

Showing 8 of 8 mapped controls across 2 domains. Sign up to explore all 819K+ mappings across 693 frameworks.

Domain 1: Governance(6 mappings)

CRAF-1.2Cyber Risk Strategy3 targets
→EN50126-2System Definition and Application Conditions
→EN50128-1Software Safety Integrity Levels
→EN50128-2Software Requirements Specification
CRAF-1.4Cyber Risk Roles and Responsibilities3 targets
→EN50126-2System Definition and Application Conditions
→EN50128-1Software Safety Integrity Levels
→EN50128-2Software Requirements Specification

Domain 2: Identification(2 mappings)

CRAF-2.2Risk and Threat Assessment2 targets
→EN50126-3Risk Analysis and Evaluation
→EN50129-4Safety Integrity Level Allocation

Related Comparisons

Other HKMA Cyber Resilience Assessment Framework (C-RAF) comparisons

HKMA Cyber Resilience Assessment Framework (C-RAF) vs CSA STAR (Security, Trust, Assurance, and Risk)15 mappingsHKMA Cyber Resilience Assessment Framework (C-RAF) vs FAA Cybersecurity Framework for Aviation15 mappingsHKMA Cyber Resilience Assessment Framework (C-RAF) vs NIST Cybersecurity Framework 2.014 mappingsHKMA Cyber Resilience Assessment Framework (C-RAF) vs RBI Cybersecurity Framework for Banks14 mappingsHKMA Cyber Resilience Assessment Framework (C-RAF) vs South Korea Cloud Security Assurance Program (CSAP)14 mappingsHKMA Cyber Resilience Assessment Framework (C-RAF) vs CSA CCM v414 mappingsHKMA Cyber Resilience Assessment Framework (C-RAF) vs ASD Information Security Manual (ISM)14 mappingsHKMA Cyber Resilience Assessment Framework (C-RAF) vs FFIEC Cybersecurity Assessment Tool (CAT)13 mappings

Other EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS) comparisons

CSA STAR (Security, Trust, Assurance, and Risk) vs EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)5 mappingsASEAN Data Management Framework vs EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)5 mappingsUS OFAC Sanctions Compliance Framework vs EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)5 mappingsEMV 3-D Secure (3DS2) — Payment Authentication Protocol vs EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)5 mappingsISO/IEC 27557:2022 — Organisational Privacy Risk Management vs EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)5 mappingsASIS SPC.1-2009 — Organizational Resilience Standard vs EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)5 mappingsCIRCIA (Cyber Incident Reporting for Critical Infrastructure Act) vs EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)5 mappingsISO/IEC 29147:2018 vs EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)5 mappings

Stop Paying Consultants to Read Spreadsheets

AI-powered compliance intelligence across 693 frameworks — at a fraction of consulting costs.

$0/forever

Free

  • ✓ 693 framework browser
  • ✓ Cross-framework mappings (819K+)
  • ✓ 824 compliance assessments
  • ✓ 3 AI queries & searches per day
Get Started Free
Recommended
$49/month

Professional

  • ✓ Unlimited AI Compliance Advisory
  • ✓ Unlimited full-text search
  • ✓ Framework self-assessment
  • ✓ PDF, Excel & CSV exports
Start 7-Day Free Trial →

Popular framework comparisons

NIST CSF vs NIST 800-53ISO 27001 vs NIST CSFCMMC vs NIST 800-53FedRAMP vs NIST 800-53NIST CSF vs SOC 2HIPAA vs NIST 800-53ISO 27001 vs SOC 2ISO 27001 vs ISO 27701

What are the key differences between HKMA Cyber Resilience Assessment Framework (C-RAF) and EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)?

HKMA Cyber Resilience Assessment Framework (C-RAF) has 24 controls across its framework, while EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS) covers 18 controls. Direct mapping analysis identifies 3 overlapping controls (12% coverage). The frameworks diverge most significantly in Domain 3: Protection, where 6 HKMA Cyber Resilience Assessment Framework (C-RAF) controls have no direct EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS) equivalent.

How many controls map between HKMA Cyber Resilience Assessment Framework (C-RAF) and EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)?

Of 24 total HKMA Cyber Resilience Assessment Framework (C-RAF) controls, 3 map directly to EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS) controls — representing 12% coverage. The remaining 21 controls represent compliance gaps requiring additional documentation or compensating controls to satisfy both frameworks simultaneously.

What are the compliance gaps when mapping HKMA Cyber Resilience Assessment Framework (C-RAF) to EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)?

21 HKMA Cyber Resilience Assessment Framework (C-RAF) controls have no direct equivalent in EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS). The highest concentration of gaps is in Domain 3: Protection with 6 unmapped controls. These gaps represent areas where additional controls, policies, or documentation must be created to achieve compliance with both frameworks.

Which control domains have the most gaps between HKMA Cyber Resilience Assessment Framework (C-RAF) and EN 50126, EN 50128, and EN 50129 — Railway Applications - Reliability, Availability, Maintainability and Safety (RAMS)?

The domain with the highest gap count is Domain 3: Protection (6 gaps). Export the full domain-by-domain gap breakdown via the Professional tier to generate a prioritised remediation roadmap.

Related Resources

How to Map Controls Across Frameworks|Multi-Framework Compliance Guide|Compliance Glossary

This platform provides educational compliance tools, not legal, regulatory, or professional compliance advice. Cross-framework mappings are AI-assisted interpretations and do not reproduce or replace official standards. Framework names and trademarks belong to their respective owners. Consult qualified professionals for your specific compliance requirements. See our Terms of Service.