Policy-to-control mapping
The documented relationship between a policy requirement, a control or configuration, its scope, its evidence, and its owner.
Scope and practical meaning
Mapping makes gaps and exceptions visible without implying that a policy statement is proof of implementation.
Common question
Why map policy to controls?
Mapping clarifies what should be true, how it is checked, who owns it, and what evidence supports the result.