TheArtOfService
Cross-Framework Mapping

OWASP DevSecOps Maturity Model (DSOMM)vsFIDO2 / WebAuthn — Passwordless Authentication Standard

See exactly how OWASP DevSecOps Maturity Model (DSOMM) controls map to FIDO2 / WebAuthn — Passwordless Authentication Standard. Pre-computed mappings, identified gaps, and coverage analysis.

3
Controls Mapped
34
Gaps Found
3%
Coverage

According to the TheArtOfService Compliance Knowledge Graph:

OWASP DevSecOps Maturity Model (DSOMM) maps to FIDO2 / WebAuthn — Passwordless Authentication Standard with 3% coverage across 1 directly mapped controls. Analysis of 37 OWASP DevSecOps Maturity Model (DSOMM) controls identifies 36 compliance gaps — primarily concentrated in Secure Development.

Source: TheArtOfService Knowledge Graph | 37 controls analysed | 693 frameworks | 819K+ cross-framework mappings

Control Mappings

Showing 3 of 3 mapped controls across 1 domains. Sign up to explore all 819K+ mappings across 693 frameworks.

Testing and Verification(3 mappings)

DSOMM-TST-04API Security Testing3 targets
→FIDO2-4.1Discoverable Credentials (Passkeys)
→FIDO2-4.2Platform Authenticator Integration
→FIDO2-4.3Cross-Device Authentication

Related Comparisons

Other OWASP DevSecOps Maturity Model (DSOMM) comparisons

OWASP DevSecOps Maturity Model (DSOMM) vs CSA CCM v416 mappingsOWASP DevSecOps Maturity Model (DSOMM) vs ASD Information Security Manual (ISM)16 mappingsOWASP DevSecOps Maturity Model (DSOMM) vs New Zealand Information Security Manual (NZISM)16 mappingsOWASP DevSecOps Maturity Model (DSOMM) vs Singapore Government Instruction Manual on ICT&SS Management (IM8)16 mappingsOWASP DevSecOps Maturity Model (DSOMM) vs CSA STAR (Security, Trust, Assurance, and Risk)15 mappingsOWASP DevSecOps Maturity Model (DSOMM) vs Australian Energy Sector Cyber Security Framework (AESCSF)15 mappingsOWASP DevSecOps Maturity Model (DSOMM) vs Canada ITSG-33 — IT Security Risk Management15 mappingsOWASP DevSecOps Maturity Model (DSOMM) vs HKMA Cyber Resilience Assessment Framework (C-RAF)15 mappings

Other FIDO2 / WebAuthn — Passwordless Authentication Standard comparisons

CSA CCM v4 vs FIDO2 / WebAuthn — Passwordless Authentication Standard3 mappingsCISA ICS-CERT Advisories and Industrial Control Systems Security Guidelines vs FIDO2 / WebAuthn — Passwordless Authentication Standard3 mappingsNIS2 Directive Implementing Acts vs FIDO2 / WebAuthn — Passwordless Authentication Standard3 mappingsFBI CJIS Security Policy vs FIDO2 / WebAuthn — Passwordless Authentication Standard3 mappingsFedRAMP Rev 5 vs FIDO2 / WebAuthn — Passwordless Authentication Standard3 mappingsUS Maritime Transportation Security Act (MTSA) and USCG Cybersecurity Requirements vs FIDO2 / WebAuthn — Passwordless Authentication Standard3 mappingsFCC Customer Proprietary Network Information (CPNI) and Data Breach Rules (47 CFR 64.2001-2011) vs FIDO2 / WebAuthn — Passwordless Authentication Standard3 mappingsEMV 3-D Secure (3DS2) — Payment Authentication Protocol vs FIDO2 / WebAuthn — Passwordless Authentication Standard3 mappings

Stop Paying Consultants to Read Spreadsheets

AI-powered compliance intelligence across 693 frameworks — at a fraction of consulting costs.

$0/forever

Free

  • ✓ 693 framework browser
  • ✓ Cross-framework mappings (819K+)
  • ✓ 824 compliance assessments
  • ✓ 3 AI queries & searches per day
Get Started Free
Recommended
$49/month

Professional

  • ✓ Unlimited AI Compliance Advisory
  • ✓ Unlimited full-text search
  • ✓ Framework self-assessment
  • ✓ PDF, Excel & CSV exports
Start 7-Day Free Trial →

Popular framework comparisons

NIST CSF vs NIST 800-53ISO 27001 vs NIST CSFCMMC vs NIST 800-53FedRAMP vs NIST 800-53NIST CSF vs SOC 2HIPAA vs NIST 800-53ISO 27001 vs SOC 2ISO 27001 vs ISO 27701

What are the key differences between OWASP DevSecOps Maturity Model (DSOMM) and FIDO2 / WebAuthn — Passwordless Authentication Standard?

OWASP DevSecOps Maturity Model (DSOMM) has 37 controls across its framework, while FIDO2 / WebAuthn — Passwordless Authentication Standard covers 11 controls. Direct mapping analysis identifies 1 overlapping controls (3% coverage). The frameworks diverge most significantly in Secure Development, where 6 OWASP DevSecOps Maturity Model (DSOMM) controls have no direct FIDO2 / WebAuthn — Passwordless Authentication Standard equivalent.

How many controls map between OWASP DevSecOps Maturity Model (DSOMM) and FIDO2 / WebAuthn — Passwordless Authentication Standard?

Of 37 total OWASP DevSecOps Maturity Model (DSOMM) controls, 1 map directly to FIDO2 / WebAuthn — Passwordless Authentication Standard controls — representing 3% coverage. The remaining 36 controls represent compliance gaps requiring additional documentation or compensating controls to satisfy both frameworks simultaneously.

What are the compliance gaps when mapping OWASP DevSecOps Maturity Model (DSOMM) to FIDO2 / WebAuthn — Passwordless Authentication Standard?

36 OWASP DevSecOps Maturity Model (DSOMM) controls have no direct equivalent in FIDO2 / WebAuthn — Passwordless Authentication Standard. The highest concentration of gaps is in Secure Development with 6 unmapped controls. These gaps represent areas where additional controls, policies, or documentation must be created to achieve compliance with both frameworks.

Which control domains have the most gaps between OWASP DevSecOps Maturity Model (DSOMM) and FIDO2 / WebAuthn — Passwordless Authentication Standard?

The domain with the highest gap count is Secure Development (6 gaps). Export the full domain-by-domain gap breakdown via the Professional tier to generate a prioritised remediation roadmap.

Related Resources

How to Map Controls Across Frameworks|Multi-Framework Compliance Guide|Compliance Glossary

This platform provides educational compliance tools, not legal, regulatory, or professional compliance advice. Cross-framework mappings are AI-assisted interpretations and do not reproduce or replace official standards. Framework names and trademarks belong to their respective owners. Consult qualified professionals for your specific compliance requirements. See our Terms of Service.