Run the Framework CCI Comparison Report

This report allows you to compare various levels of different frameworks at the control correlation identifier (CCI) level to see gaps in coverage or compliance. You can pick the framework on either side, select the options and run the report. The results will show if a CCI is in the first set of CCIs, the second set of CCIs or both.

Note that if the frameworks do not rely on similar controls and control numbering that the difference may be close to 100%. As an example, you can compare CMMC to RMF and see some overlap but may not get a lot of overlap.

OpenRMF Professional Framework CCI Report

Where the Data Comes From

This data comes from the framework / control / CCI listing for all frameworks and framework levels (if any) in your installation. Some of these may be default framework / control / CCI listings. Others may be some you created or uploaded.

Why Run this Report

This report just shows you what CCIs are in the various groups of frameworks to contrast and comparison. It also lets you crosswalk between cyber compliance frameworks at the CCI level.