# Control mapping

> How one piece of work satisfies requirements in several frameworks.

Source: https://docs.csquaregrc.com/concepts/control-mapping


Frameworks overlap. An access review satisfies SOC 2 CC6.2, ISO 27001 A.5.18 and HIPAA 164.308 at once. **Control mapping** records those links so you implement once and comply many times.

## How it works

- Each mapping links a control in one framework to a control in another, with a strength: equivalent, partial or related.
- Evidence linked to one control shows on mapped controls, labelled with its source.
- Partial mappings flag what the target framework needs beyond the source.

Ask Fibo or use the `map_controls` [MCP tool](/mcp/tools) to generate mappings.