Controls & Frameworks Crosswalk
CIS Controls v8, NIST CSF 2.0 and ISO/IEC 27001:2022 as one ontology. You map CIS → NIST and NIST → ISO; the reasoner makes "satisfies" transitive and works out which ISO requirements each CIS control covers end-to-end — coverage nobody wrote down. Then propose one rule and watch which controls get reclassified, with a consistency verdict.
Declare that any control which (transitively) satisfies ISO A.5.15 Access control is an identity-assurance control — then ask the engine which CIS controls now qualify.
IdentityAssuranceControl ≡ ∃ satisfies.{A.5.15 Access control}Cross-framework coverage the engine derived — end-to-end, nobody wrote these down
You mapped CIS → NIST and NIST → ISO separately. Because "satisfies" is declared transitive and both mappings are kinds of "satisfies", the reasoner chained them: each CIS Control now satisfies the ISO requirements it reaches through NIST. CIS 5 covers two ISO requirements that way. These are reasoned − asserted: 24 triples (owl-rl).
Frequently asked questions
Is the Controls & Frameworks Crosswalk just a drawing?
No. The entities and relationships are curated from public sources (CIS Controls v8 mappings (NIST CSF, ISO 27001); NIST CSF 2.0), but the consequences are computed by the open-source Open Ontologies reasoning engine, not drawn by hand. The engine-derived panel lists exactly the facts the reasoner added on top of what was written down (101 reasoned minus 77 asserted triples), and the proposed-rule panel is the engine answering an OWL-DL query with a consistency verdict for the whole ontology.
What does "blast radius" mean here?
We add one new rule of intent and ask the reasoner what changes. Here the rule is: Declare that any control which (transitively) satisfies ISO A.5.15 Access control is an identity-assurance control — then ask the engine which CIS controls now qualify. The engine (owl-dl, description logic SHIQ) returns exactly which entities are reclassified (3 here) and confirms the ontology stays logically consistent. You change a rule; the machine, not a person, works out every consequence.
What is Open Ontologies?
Open Ontologies (github.com/fabio-rovai/open-ontologies, MIT-licensed) is an open-source reasoning engine described as "Terraform for knowledge graphs." It loads RDF/Turtle, runs OWL-RL and OWL-DL reasoning over an in-memory triple store, answers SPARQL, and can produce checkable certificates for its conclusions. PlayCISO ships only the captured output it produces; the engine is not a runtime dependency.