PP-SPEC-063: Proof of Efficacy Mapping to CIS Critical Security Controls®

Status: DRAFT v0.1 Author: Craig Ellrod / Nebulonium, Inc. / HACKERverse® License: Greater Good Commercial License 1.0 (GGL-C-1.0); text CC BY 4.0 under Part S. See LICENSE.md.

Normative specification: PP-SPEC-063-CIS-Critical-Security-Controls-Mapping.md

Purpose

This repository defines a Proof Protocol mapping between the CIS Critical Security Controls® (CIS Controls®) Version 8.1 and Proof Protocol evidence, efficacy, and proof semantics.

The external framework supplies context describing what may be tested. Proof Protocol remains framework-agnostic and independently establishes whether a selected control performed as claimed.

Repository contents

• PP-SPEC-063-CIS-Critical-Security-Controls-Mapping.md: normative mapping specification
• README.md: repository overview
• LICENSE: license for original Proof Protocol material
• CONTRIBUTING.md: contribution guidance
• CITATION.cff: citation metadata

Architectural principle

Threat, control, audit, and regulatory frameworks are pluggable inputs to Proof Protocol. Proof Protocol is framework-agnostic.

External frameworks identify what may be tested. Proof Protocol independently establishes whether a control worked and what evidence proves the result.

Ownership and external-framework notice

This Proof Protocol mapping is independently authored. CIS®, CIS Critical Security Controls®, CIS Controls®, associated names, identifiers, marks, and upstream materials remain the property of the Center for Internet Security, Inc. Mapping establishes interoperability, not dependency, endorsement, certification, or transfer of ownership. No affiliation, endorsement, certification, or sponsorship by the Center for Internet Security, Inc. is implied.

The CIS Controls Licensed under the Greater Good Commercial License 1.0 (see LICENSE.md); text CC BY 4.0 under its Part S. Original inventor: Craig Thomas Ellrod (ORCID 0009-0004-1058-7666).