Skip to content
Cyber Compliance

CCPA / CPRA → NIST CSF 2.0 crosswalk

A control-by-control mapping between California Consumer Privacy Act (as amended by CPRA) and NIST Cybersecurity Framework 2.0. 3 mappings.

CCPA / CPRANIST CSF 2.0RelationshipNotes
§1798.100
Consumers' right to know and notice at collection
GV.OC-01
Organizational mission and security role understood
RelatedCurated
Governance & security policy
§1798.130
Methods for handling consumer requests
ID.AM-01
Inventories of hardware managed
RelatedCurated
Asset & data inventory
§1798.150
Duty to implement reasonable security
ID.RA-01
Vulnerabilities identified and recorded
RelatedCurated
Risk assessment & management

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.