What does Golden Thread map?

Golden Thread crosswalks all 22 NIST CSF 2.0 categories against ONR SyAPS (2022), NCSC CAF v4.0 and ISO/IEC 27001:2022, so a single evidenced control can be shown to satisfy several nuclear-sector regulatory and certification regimes at once.

Is my assessment data sent to your servers?

No. Everything you enter — assessment status, evidence, controls and notes — is saved only in your own browser's local storage. Nothing is transmitted to or stored on our servers.

Can I export a report?

Yes. The Export tab generates a Markdown report, a Word document, a print-to-PDF report, or a JSON backup of your full assessment state, scoped to any function filter you've applied.

Is this tool specific to the nuclear sector?

Yes — the framework mappings are built around ONR SyAPS and nuclear-specific regulatory context. The same crosswalk approach can be rebuilt around a different sector's frameworks on request.

Nuclear sector · Interactive tool

Golden Thread

Map NIST CSF 2.0 against ONR SyAPS (2022), NCSC CAF v4.0 and ISO/IEC 27001:2022, assess your position in eCAF language, record evidence and implemented controls, and export a report — all in your browser, nothing sent to our servers.

Loading assessment state…

Built this for nuclear. The approach generalises.

This tool uses NIST CSF 2.0 as a spine and maps a regulated sector's frameworks onto it so one evidence pack can satisfy several obligations at once. The same approach works for any organisation juggling more than one framework or regulator — a NIST-to-CAF-to-ISO crosswalk, a sector-specific regulatory mapping, or a bespoke version of this tool built around your own frameworks and control set.

Talk about a framework mapping for your organisation