ZenGRC: Program mapping structure
Structuring your Programs
Version 1: The ideal mapping structure *PREFERRED*
With this structure your Program has a nested mapping structure where Regulations/Standards/Policies/Contracts break down into Sections/Clauses, then Objectives are extracted from those Sections/Clauses, and finally Controls are mapped to the Objectives.
...