Control catalogues

Different catalogues describe broadly similar safeguards in different language, which is why mapping between them is a permanent industry.

ISO, NIST, CIS and sectoral schemes overlap heavily. Implementing a control once and mapping it to several frameworks is entirely legitimate and much cheaper than running parallel programmes, provided somebody checks that the mapping is honest rather than convenient.