A crosswalk is a mapping between two frameworks, standards, or control sets. It shows how one requirement, control, or practice relates to another, even when the wording and structure differ. Security teams use crosswalks to compare internal policies with external frameworks such as NIST, ISO, or sector rules, and to see where controls overlap, differ, or are missing.
In cyber security, crosswalks matter because organizations rarely work from a single standard. A good crosswalk helps teams avoid duplicated work, identify gaps in logging, access control, or incident response, and prove coverage during audits. In attacks, weak or incomplete crosswalks can hide blind spots by making controls look aligned when they are not. In defense, they support governance, compliance, and risk assessments by turning complex requirements into a practical checklist for action.