Nexus Standards · Verification and monitoring · Crosswalk

Verification and monitoring

Verification and monitoring: crosswalk to external standards

The external standards in the crosswalk domains of verification and monitoring, from the register, with the relation of each to the Nexus Standards. Each row links to the issuing body, and each relation is evidenced by attestations identified by UNIs (Unique Nexus Identifier).

Back to Verification and monitoringAll programme areas
01Canvas

The process.

Crosswalk graph · verification and monitoringNexus Standards registry
Verification and monitoring: crosswalk37 nodes on four orbits (Nexus Standards and implementing repositories at the centre, then domains, external standards and issuing bodies), joined by 41 recorded relations.
Nexus StandardsDomainsExternal standardsIssuing bodiesImplementing repositories

1 Nexus Standards · 3 domains · 19 external standards · 14 issuing bodies · 0 implementing repositories. Relations (adopt, profile, crosswalk, cite) are as recorded in the register; names and standards remain with their stewards.

Crosswalk graph37 nodes and 41 links from the registry of external standards, programme areas and implementations (registry/external-standards.yaml, registry/consumers.yaml. Relations (adopt, profile, crosswalk, cite) are shown as recorded in the register.

02Zero trust and identity

Zero trust and identity

3 register entries.

StandardBodyVersionRelationAccessVerified
NIST SP 800-207 Zero Trust ArchitectureNISTFinal (11 August 2020)adoptopenverified
CISA Zero Trust Maturity Model Version 2.0CISA (US Cybersecurity and Infrastructure Security Agency)2.0 (April 2023)profileopenverified
OAuth 2.0 (RFC 6749) and OpenID Connect Core 1.0IETF and OpenID FoundationRFC 6749 (2012); OpenID Connect Core 1.0adoptopenunverified

Unverified entries rest on a secondary source for at least one field, as indicated in the register.

03Canvas

Crosswalk evidence.

Canvas · crosswalk evidenceProcess diagram
Verification and monitoring: how a relation to an external standard is evidencedRegister entries for the area by domain and relation. NS-14 specifies the evidence each relation requires and the form in which a claim may be displayed. Names and standards remain with their stewards.

Fig.Relations recorded for the area and the evidence NS-14 requires before a relation is displayed.

04Earth observation

Electrified and connected activity worldwide

The map is framed on the world as context for verification and monitoring. Shown at first: night-time lights, daily (VIIRS Black Marble, VNP46A2, NASA LAADS DAAC) and population density, 2020 (Gridded Population of the World v4.11, NASA SEDAC, CIESIN, Columbia University). The layer drawer adds true colour (VIIRS NOAA-20 corrected reflectance). NASA products are served through NASA GIBS under NASA's open data policy, with acknowledgement; population density is GPW v4.11 by CIESIN, Columbia University, under CC BY 4.0; coastlines, boundaries and place names come from NASA GIBS reference layers (© OpenStreetMap contributors, ODbL) and Natural Earth (public domain). Each layer shows its own observation date; full credits are given under the map. Other sources of the profile, such as CISA Known Exploited Vulnerabilities catalogue and OSV.dev vulnerability API, are listed for reference.

The interactive map needs JavaScript; the layer list and sources are below.

Layers 2

Connected activity

Latest available

NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth

Loading the latest NASA imagery.

Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.

Connected activity, framed on World. Layers as NASA publishes them, each with its own date.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place.

Data: NASA GIBS · ASTER GDEM · Blue Marble · © OpenStreetMap contributors · Natural EarthSources and licences

  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • VIIRS Black Marble night-time lights, NASA Goddard Space Flight Center; distributed by the NASA Level-1 and Atmosphere Archive and Distribution System (LAADS DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Center for International Earth Science Information Network (CIESIN), Columbia University. 2018. Gridded Population of the World, Version 4 (GPWv4): Population Density, Revision 11. NASA Socioeconomic Data and Applications Center (SEDAC). Licensed under CC BY 4.0. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). doi:10.7927/H49C6VHW. CC BY 4.0
  • VIIRS near-real-time products (flood, land surface temperature, snow cover, corrected reflectance), NASA LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • ASTER GDEM is a product of METI and NASA (ASTER Global Digital Elevation Model V003, NASA LP DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). Cite as: NASA/METI/AIST/Japan Spacesystems and U.S./Japan ASTER Science Team (2019). ASTER Global Digital Elevation Model V003. doi:10.5067/ASTER/ASTGTM.003. NASA open data
  • Made with Natural Earth. Free vector and raster map data @ naturalearthdata.com. Public domain
  • © OpenStreetMap contributors (ODbL), via NASA GIBS (coastlines, boundaries, roads and place names). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). ODbL
  • Blue Marble, NASA Earth Observatory; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Context on the globe and flat map: coastlines, boundaries, roads and place names from NASA GIBS reference layers (OpenStreetMap data, ODbL, © OpenStreetMap contributors); Blue Marble imagery as an optional base; 3D terrain and the elevation read-out from the ASTER GDEM elevation colour index (5 m to 200 m classes, exaggerated for legibility). Boundaries are drawn as published and imply no position on any territory.
  • Globe: MapLibre GL JS 6.9.1, BSD-3-Clause, © MapLibre contributors.
  • NASA GIBS: We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS).
  • Optional layers (3 sources in the layer list: live, forecast, observed and context) print their provider credit on the map and here when switched on; forecasts are model output and derived indices are estimates.

Layers and dates

  • Night-time lights, daily: VIIRS Black Marble (VNP46A2), NASA LAADS DAAC · 12 Oct 2026
  • Population density, 2020: Population: CIESIN, Columbia University, Gridded Population of the World v4.11 (2018), NASA SEDAC, CC BY 4.0 · static
  • True colour: VIIRS NOAA-20 corrected reflectance, NASA LANCE · 13 Oct 2026

05Provenance and evidence

Provenance and evidence

6 register entries.

StandardBodyVersionRelationAccessVerified
Sigstore (Cosign, Fulcio, Rekor)OpenSSF (Linux Foundation); graduated project March 2024project; Rekor v2 general availability reported October 2025adoptopenverified
in-toto Attestation Frameworkin-toto project (CNCF)1.0 (stable per in-toto.io)adoptopenverified
W3C PROV-O: The PROV OntologyW3C Provenance Working GroupW3C Recommendation 30 April 2013adoptopenverified
W3C Verifiable Credentials Data Model v2.0W3C Verifiable Credentials Working GroupW3C Recommendation 15 May 2025crosswalkopenverified
C2PA Content Credentials specificationCoalition for Content Provenance and Authenticity (Joint Development Foundation)2.1adoptopenunverified
IETF SCITT architecture (Supply Chain Integrity, Transparency and Trust)IETF SCITT working groupdraftprofileopenunverified

Unverified entries rest on a secondary source for at least one field, as indicated in the register.

06Enterprise and organisational risk

Enterprise and organisational risk

10 register entries.

StandardBodyVersionRelationAccessVerified
ISO 31000:2018 Risk management - GuidelinesISO/TC 2622018 (second edition; revision at working-draft stage)compatibility profile (restricted)paywalledverified
IEC 31010:2019 Risk management - Risk assessment techniquesIEC TC 56 with ISO/TC 262 (double logo)2019 (edition 2.0)citepaywalledverified
ISO 31022:2020 Risk management - Guidelines for the management of legal riskISO/TC 2622020 (first edition)citepaywalledverified
COSO Enterprise Risk Management - Integrating with Strategy and PerformanceCommittee of Sponsoring Organizations of the Treadway Commission (COSO)2017 (released 6 September 2017)compatibility profile (restricted)paywalledunverified
ISO 37301:2021 Compliance management systems - Requirements with guidance for useISO/TC 3092021citepaywalledunverified
ISO 37000:2021 Governance of organizations - GuidanceISO/TC 3092021citepaywalledverified
ISO 37001:2025 Anti-bribery management systems - Requirements with guidance for useISO/TC 3092025 (published 28 February 2025; replaces 2016 edition with 2024 amendment)citepaywalledverified
ISO 31073:2022 Risk management - VocabularyISO/TC 2622022compatibility profile (restricted)paywalledunverified
ISO 31050:2023 Risk management - Guidelines for managing an emerging risk to enhance resilienceISO/TC 2622023compatibility profile (restricted)paywalledunverified
ISO 45001:2018 Occupational health and safety management systemsISO/PC 2832018compatibility profile (restricted)paywalledunverified

Unverified entries rest on a secondary source for at least one field, as indicated in the register.

07Relations

Relation types and their evidence

RelationMeaningEvidence
citeThe Nexus Standard refers to the external standard as context.Identifier, version and URL in the register.
profileThe Nexus Standard constrains or specialises an open external standard (for example STAC, DCAT, PROV-O, DataCite, CAP).Conformance tests against the external standard's own validator where one exists.
crosswalkElements of the external standard map to Nexus elements (clauses, record fields).A crosswalk table in the register entry; each row cites the external clause by number, never by text.
adoptThe Nexus Standards use the external standard as it is for a function (for example ISO 3166-1, SPDX, ORCID, ROR).Validation of values against the external scheme.
extendA Nexus Standard adds machine-readable, real-time or provenance elements that the external standard lacks.The extension is a Nexus clause or field; the external standard is cited as the baseline.
gapNo external standard covers the concern; a Nexus Standard specifies it.The gap statement in the landscape study.
08Questions

Questions and answers.

Does a crosswalk establish that a verification and monitoring artifact conforms to these standards?
A crosswalk is a mapping. A relation is displayed as clauses derived from the external standard and their current results; any determination of conformity with an external standard rests with the body entitled to make it.
Why are some relations shown as compatibility profile (restricted)?
The standard is paywalled. Its text is not reproduced, and a compatibility profile of it is published only under an institutional arrangement with the issuing body.
Why are some entries marked unverified?
An unverified entry rests on a secondary source for at least one of name, body, version or year; NS14-R5 requires it to be shown as unverified.
NRNexus Reports gateway · GW-STD

Contribute to Nexus Reports from this page.

Nexus Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.

Nexus Standards

Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.

Across the Consortium

The same subject across the Consortium.

Related

Around Verification and monitoring.

Nexus Standards

Shape the standards for verification and monitoring.

Governments, regulators, standards bodies, industry, academia and communities are invited to shape the catalogue ahead of its first official release, targeted for 2030: comment on a draft, propose a change, join a working group or host a field exercise.

Propose a change Roadmap to 2030Adopt and implement

Status and use. The Nexus Standards are proposed standards developed through an open process under NS-13 and published for voluntary use; they do not constitute certification, accreditation or regulatory approval, and adoption remains a decision of the Global Standards Council and, in each country, of its National Standards Council. A UNI (Unique Nexus Identifier) identifies an artifact; it does not certify it. Names of standards bodies and their standards belong to their stewards and are used only to identify the documents; no text of an external standard is reproduced here. Nexus Standards is not affiliated with, endorsed by or certified by any standards body named here.

Licences: CC BY 4.0 for standards text, registries, schemas and data; Apache-2.0 for reference code. External standards are cited by name, number and link under their own licences. Third-party data, libraries and fonts keep their own licences: see Third-party notices.

Skip to toolbar