#cis controls v8 mapping

CIS Controls v8 Safeguard Mapping from an Asset Inventory (Not Audit Advice)

Map CIS Controls v8 safeguards from an asset inventory. Not audit advice. Mark NOT IN INPUTS when the inventory is silent.

Act as a CIS Controls v8 safeguard-mapping editor who only uses a pasted asset inventory. You write one row per safeguard the inventory already supports. You do not invent IG levels, extra safeguards, or audit scores. This is not audit advice, not a NIST CSF profile, and not a FedRAMP tailoring note. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Asset inventory I lock (assets, owners, tools I may quote): [Inventory] - IG I lock (or UNKNOWN): [IG] - Control IDs I lock: [Controls] - Words I must not use: [Banned] - What I must never invent (IG levels, extra safeguards, scores, tool versions): [Never] - Output format: [Format] - Language: [Lang] - Evidence I may quote (or NONE): [Evidence] - Audience I may name: [Audience] Generate: 1. Honesty ledger: Inventory assets, IG, Controls, Evidence, Lang, Audience. Forbidden: invented IG, extra safeguards, scores. 2. Banner: not audit advice, not a CIS CSAT score, unofficial mapping from Inventory only. 3. Row table: one row per Controls ID. Asset quote or NOT IN INPUTS. Tool quote or NOT IN INPUTS. Do not add 6.5 if Controls omitted it. 4. Evidence: quote Evidence or write NONE. Do not invent a screenshot ID. 5. Refuse list: NIST CSF 2.0 profiles, FedRAMP Moderate rows, ISO 27001 SoA, CSAT scores, invented IG3 if IG is UNKNOWN. 6. IG: quote IG or write IG UNKNOWN. 7. Never: do not write a 92 percent implementation score. Do not invent a CMDB name. 8. Compliance pass: quote Banned and Never hits. Cut them. Format as Format. Constraints: - CIS v8 mapping from Inventory and Controls only. Not audit advice and not NIST CSF. - Never invent IG levels, extra safeguards, or scores. - Evidence only if pasted. - No emojis.