Each SIG release is mapped to reference documents so one response can serve several frameworks: the 2024 SIG carries direct mappings to 27 reference documents in the content library (among them the 2024 SCA, ISO/IEC 27001 and 27002:2022, ISO/IEC 27701, NIST AI 100-1, NIST SP 800-161r1, NIST SP 800-53 Rev 5, the NIST Cybersecurity and Privacy Frameworks, CMMC 2.0, CIS Controls v8, the EBA outsourcing guidelines, the GDPR, the US interagency third-party guidance, FedRAMP, FFIEC handbooks, HIPAA, NYDFS Part 500, CSA CAIQ and CCM, ISA 62443 and PCI DSS 4.0), with further crosswalks available to members; the 2026 release adds a mapping to ISO/IEC 42001 and the Operational Resilience Framework and deepens NIST SP 800-171. Shared Assessments issues an annual release with interim revisions (for 2024: 2024.1 on 16 November 2023, 2024.2 and 2024.2.1 on 29 February 2024), so users check the version in use and re-baseline responses when a new release changes questions, domains or mappings.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.