Nexus Standards · Foundations and Governance · Foundations

Area · proposed

Compatibility profiles for closed standards

Explains how closed and paywalled standards (for example ISO 31000, ISO 22301 and ISO/IEC 27001) are related to Nexus artifacts without reproducing them: named-only references by clause number and URL, profiles exercised only on synthetic example data, held on access-controlled pages and carrying a not-affiliated notice, and activated publicly only after an arrangement with the issuing body is recorded as an executed obligation. Each artifact of the area carries a UNI (Unique Nexus Identifier).

UNI
requested · allocation in progress
Status
Proposednot yet listed in the registry
Last reviewed
area profile
Cite this page

Nexus Standards (2026). Compatibility profiles for closed standards: area brief, Foundations and Governance programme. Proposed. https://nexustandards.com/foundations/compatibility-profiles/. Last reviewed 17 October 2026.

Download the profile

Files include the credits and the licence statement and are generated in the browser; no data is transmitted. Downloads require JavaScript.

02Scope

Scope and boundaries

An area of the Foundations and Governance programme (foundations). The area profile sets out 5 matters in scope and 3 matters addressed by other areas.

In scope 5

  • Clause-number crosswalks that refer to the issuing body's page without quoting it
  • Synthetic example datasets for profile exercises
  • Access rules for protected pages and the not-affiliated notice
  • Activation procedure per issuing body and the executed-obligation record
  • Open alternatives that can be adopted in place of a closed baseline

Out of scope 3

  • Reproduction, summary or paraphrase of closed standards
  • Any statement of equivalence to, or conformity with, a closed standard
  • Actual institutional data on protected pages

Jurisdictions Application in each jurisdiction is a national decision, taken by the National Standards Council (NSC) with the competent national authorities.

03Earth observation

Population, settlement and hazards in Latin America and the Caribbean

The map frames Latin America and the Caribbean as an example geography for compatibility profiles for closed; the frame gives context and is not a statement of where the standards apply. Shown at first: population density, 2020 (Gridded Population of the World v4.11, NASA SEDAC, CIESIN, Columbia University) and night-time lights, daily (VIIRS Black Marble, VNP46A2, NASA LAADS DAAC). The layer drawer adds flood water, 3-day composite (VIIRS Global Flood Product); active fires and thermal anomalies, last day (VIIRS NOAA-20 375 m, FIRMS); and true colour (VIIRS NOAA-20 corrected reflectance). NASA products are served through NASA GIBS under NASA's open data policy, with acknowledgement; population density is GPW v4.11 by CIESIN, Columbia University, under CC BY 4.0; coastlines, boundaries and place names come from NASA GIBS reference layers (© OpenStreetMap contributors, ODbL) and Natural Earth (public domain). Each layer shows its own observation date; full credits are given under the map. Other sources of the profile, such as NIST OSCAL content (SP 800-53 Rev. 5 catalogue in OSCAL JSON) and NIST National Vulnerability Database APIs (open data for simulated control exercises), are listed for reference.

The interactive map needs JavaScript; the layer list and sources are below.

Layers 2

People and hazards

Latest available

NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth

Loading the latest NASA imagery.

Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.

Where people live, night-time lights and the floods and fires public institutions answer to, framed on Latin America and the Caribbean.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place.

Data: NASA GIBS · ASTER GDEM · Blue Marble · © OpenStreetMap contributors · Natural Earth · NASA EONETSources and licences

  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Center for International Earth Science Information Network (CIESIN), Columbia University. 2018. Gridded Population of the World, Version 4 (GPWv4): Population Density, Revision 11. NASA Socioeconomic Data and Applications Center (SEDAC). Licensed under CC BY 4.0. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). doi:10.7927/H49C6VHW. CC BY 4.0
  • VIIRS Black Marble night-time lights, NASA Goddard Space Flight Center; distributed by the NASA Level-1 and Atmosphere Archive and Distribution System (LAADS DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • VIIRS near-real-time products (flood, land surface temperature, snow cover, corrected reflectance), NASA LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • NASA Fire Information for Resource Management System (FIRMS), VIIRS 375 m active fire product, NASA LANCE; vector tiles via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • ASTER GDEM is a product of METI and NASA (ASTER Global Digital Elevation Model V003, NASA LP DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). Cite as: NASA/METI/AIST/Japan Spacesystems and U.S./Japan ASTER Science Team (2019). ASTER Global Digital Elevation Model V003. doi:10.5067/ASTER/ASTGTM.003. NASA open data
  • Made with Natural Earth. Free vector and raster map data @ naturalearthdata.com. Public domain
  • © OpenStreetMap contributors (ODbL), via NASA GIBS (coastlines, boundaries, roads and place names). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). ODbL
  • Blue Marble, NASA Earth Observatory; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Context on the globe and flat map: coastlines, boundaries, roads and place names from NASA GIBS reference layers (OpenStreetMap data, ODbL, © OpenStreetMap contributors); Blue Marble imagery as an optional base; 3D terrain and the elevation read-out from the ASTER GDEM elevation colour index (5 m to 200 m classes, exaggerated for legibility). Boundaries are drawn as published and imply no position on any territory.
  • Globe: MapLibre GL JS 6.9.1, BSD-3-Clause, © MapLibre contributors.
  • Live: NASA EONET Events are indicative, not authority warnings.
  • NASA GIBS: We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS).
  • Optional layers (3 sources in the layer list: live, forecast, observed and context) print their provider credit on the map and here when switched on; forecasts are model output and derived indices are estimates.

Layers and dates

  • Population density, 2020: Population: CIESIN, Columbia University, Gridded Population of the World v4.11 (2018), NASA SEDAC, CC BY 4.0 · static
  • Night-time lights, daily: VIIRS Black Marble (VNP46A2), NASA LAADS DAAC · 12 Oct 2026
  • Flood water, 3-day composite: VIIRS Global Flood Product, NASA LANCE · 14 Oct 2026
  • Active fires and thermal anomalies, last day: VIIRS NOAA-20 375 m (FIRMS), NASA LANCE FIRMS · 13 Oct 2026
  • True colour: VIIRS NOAA-20 corrected reflectance, NASA LANCE · 13 Oct 2026

04Process

The process in operation

An external standard enters the register with its body, version, link and relation; crosswalk rows cite external clauses by number; a claim of relation exists only through a clause set that cites the standard and is evaluated; the claim is displayed with its attestation results, names and marks stay with their stewards, and no claim of compliance or certification is made except by quoting an authority decision. 7 operations in 5 phases, built from the area profile: the cards carry its own data sources, indicators, open standards, couplings and, where listed, hazards, and each operation names the Nexus rules it implements (7). Records and artifacts are cited by UNI (Unique Nexus Identifier) and version.

Process · from a register entry to a displayed claim (NS-14)7 operations · 5 phases
Compatibility profiles for closed standards: from a register entry to a displayed claim (NS-14)An external standard enters the register with its body, version, link and relation; crosswalk rows cite external clauses by number; a claim of relation exists only through a clause set that cites the standard and is evaluated; the claim is displayed with its attestation results, names and marks stay with their stewards, and no claim of compliance or certification is made except by quoting an authority decision.
All operations in order (7)
  1. 01

    Register entry start · Register

    A superseded external version is kept with its successor noted.

    Who
    the editors
    Decision rule
    unverified entries are displayed as unverified; entries are append-only
    Record
    body, version, URL, domain, access, relation and verified flag
    Implements
    NS14-R5
  2. 02

    Relation decision · Relation

    Each relation has its own evidence: a link, a validator run, a crosswalk table, value validation, an extension clause or a gap statement.

    Who
    the working group
    Decision rule
    relation claims come from the register and clause sets, never from prose
    Record
    cite, profile, crosswalk, adopt, extend or gap
    Implements
    NS14-R2
  3. 03

    Crosswalk rows step · Relation

    Each row maps an external element to a Nexus clause or record field.

    Who
    the working group
    Decision rule
    no reproduction of external text; cite by identifier, clause number and URL
    Record
    rows citing the external clause by number and URL
    Implements
    NS14-R1
  4. 04

    Clause set model · Clauses

    Each clause carries derivedFrom with the external identifier and clause number.

    Who
    the policy author
    Decision rule
    a claim of relation exists only through a clause set that is evaluated
    Record
    a clause set (NS-10) whose clauses cite the external standard
    Implements
    NS14-R2, NS10-R4
  5. 05

    Evaluate exercise · Evaluation

    Current results are counted per clause set.

    Who
    an evaluator with a mandate
    Decision rule
    no conformance statement without an attestation
    Record
    attestations per clause with their instants
    Implements
    NS11-R1
  6. 06

    Claim display record · Display

    The claim states what was evaluated and when, never an equivalence.

    Who
    the publishing surface
    Decision rule
    compliant and certified appear only as quotations of an authority decision by reference
    Record
    'implements clauses derived from <standard> (n of m current PASS)' with attestation UNIs
    Implements
    NS14-R3
  7. 07

    Names and marks end · Display

    Pages that list crosswalks carry the notice that names and standards belong to their stewards.

    Who
    the publishing surface
    Decision rule
    marks of standards bodies are never part of a Nexus name
    Record
    the body's name and identifier as a reference, with the stewards notice
    Implements
    NS14-R4

Fig.Phases read left to right; each card names the operation, its actor and the record it leaves, and each edge label names the hand-over. Play, step or scrub; the detail panel gives the full text of the selected operation. Sources: NIST Online Informative References (OLIR) programme · Open Security Controls Assessment Language (OSCAL) · NS-14: Conformance and crosswalk to external standards · NS-10: Policies and clauses.

05Standards architecture

Foundation, referenced and implementing layers

The standards architecture of this context, from the foundation standards to the open standards referenced (grouped by type of relation) and the services and data sources that build on them.

The interactive view requires JavaScript; the sections below present the same records.

06Nexus Standards

Applicable Nexus Standards

The area profile lists 2 Nexus Standards. Each is a proposed standard under development.

  1. 01

    NS-10 · Policies and clauses (machine-readable obligations: definition, binding, evaluation and enforcement)

    Status: proposed · 7 requirements stated. Read NS-10

  2. 02

    NS-11 · Verification and monitoring (evidence, attestations, zero-trust conformance observation)

    Status: proposed · 6 requirements stated. Read NS-11

07System model and scenario simulator

System model and cascade scenario: Compatibility profiles for closed standards

A system model of this area built from the registry: 5 systems, 3 sectors, 8 controls, 2 feeds, 1 indicator. Select the components to include, choose an initiating hazard and run the scenario. Stress propagates through the hazard relations of the Nexus Hazard Standard (NHS-1), the exposure of each system, the recorded couplings and the sectors that carry the loss; adopted standards dampen transmission and live data sources support detection. All parameters are stated assumptions that the reader can adjust; results are illustrative scenario outputs for exercises and training, not forecasts or risk assessments.

Controls

  • NS-10 Policies and clauses (machine-readable obligations: definition, binding, evaluation and enforcement)
  • NS-11 Verification and monitoring (evidence, attestations, zero-trust conformance observation)
  • NRS-H56 Hazard family: Conflict-induced harm (NHS-1 soc.conflict-induced)
  • NRS-H97 Hazard family: AI misuse and capability uplift (NHS-1 tech.ai-misuse)
  • NRS-H23 Hazard family: Impacts and orbital hazards (NHS-1 space.orbital)
  • NRS-H31 Hazard family: Persistent and bioaccumulative substances (NHS-1 poll.persistent)
  • NRS-H36 Hazard family: Vaccine-preventable outbreaks (NHS-1 health.vaccine-preventable)
  • NRS-H103 Hazard family: Neurotechnology, human enhancement and extended reality (NHS-1 tech.neuro-enhancement)

Observation

  • NIST OSCAL content (SP 800-53 Rev. 5 catalogue in OSCAL JSON) (listed for reference)
  • NIST National Vulnerability Database APIs (open data for simulated control exercises) (listed for reference)
  • Metadata uses FAIR-compliant vocabularies
08Systemic couplings

Systemic couplings

4 couplings link this area to other areas and programmes, each with the mechanism of the link. Select a card on the diagram to trace a coupling.

Diagram · the area and its couplingsProcess diagram
Compatibility profiles for closed standards: systemic couplingsSystemic couplings of Compatibility profiles for closed standards as stated in the area profile: 3 areas in Foundations and Governance, 0 areas in other programmes and 1 programme reached. Each coupling states the mechanism that links the two areas.

Fig.The area at the left; coupled areas in the same programme, coupled areas in other programmes and the programmes reached to the right.

  1. Licensing and intellectual propertyFoundations and GovernanceThe copyright of closed standards is why no text, structure or definition is reproduced; the licence rules set what a profile page may contain.
  2. Conformance programmeFoundations and GovernanceProfiles reuse the declaration model on synthetic example data only, and results are not presented as conformance to the closed standard.
  3. Governance and liaisonFoundations and GovernancePublic activation of a profile depends on an arrangement with the issuing body, which the liaison register records only on that body's confirmation.
  4. Trust, Verification and AssuranceTrust, Verification and AssuranceOpen control catalogues mapped by identifier (for example NIST SP 800-53 through OSCAL) let the Trust, Verification and Assurance programme test controls without the closed text.
09Working group

Working group charter

A proposed charter for this area, open to institutions and experts.

Scope

Maintain the profile method, synthetic example datasets, access rules and the activation procedure for each issuing body.

Institutions and experts are invited to charter this working group under NS-13 by filing a public change record. National Working Groups (NWGs) contribute national inputs and field exercises through their National Nexus Consortium (NNC).

Deliverables · 3
  1. Profile method and page template with the not-affiliated notice
  2. Synthetic example datasets for three example profiles
  3. Activation procedure and executed-obligation record template
Liaison targets · 3
  • ISO Central Secretariat through the Standards Council of Canada (arrangement on named references sought) liaison sought
  • IEC (arrangement for IEC-published joint standards sought) liaison sought
  • NIST OLIR programme (information exchange on informative references sought) liaison sought
12Research questions

Open research questions

3 questions identified as priorities for the working group.

  1. How to make a clause-number crosswalk useful when the clause numbers change between editions of a closed standard.
  2. How to prevent synthetic example data from being mistaken for an actual assessment when screenshots are shared beyond the protected pages.
  3. What the open alternative should be where no open standard covers a closed management-system requirement.
13Readiness

Evidence, recognition and capital pathways

What each institution of the ecosystem draws from this area: GCRI Canada, as Secretariat, for evidence; The Global Risks Forum (GRF) for recognition; and The Global Risks Alliance (GRA) for capital.

Evidence pathway

GCRI Canada

GCRI Canada decides under its own rules whether profile exercises on synthetic example data inform its evidence work; such exercises do not substitute for evidence about an actual institution.

Read the evidence pathway

Recognition pathway

The Global Risks Forum (GRF)

The Global Risks Forum (GRF) determines whether to use profile pages in its dialogues; protected access implies no GRF role.

Read the recognition pathway

Capital pathway

The Global Risks Alliance (GRA)

The Global Risks Alliance (GRA) decides capital readiness under its own criteria; a profile exercise is not an assessment of any member.

Read the capital pathway

Each institution determines under its own rules what it accepts as evidence; a pathway reading is neither an approval nor investment advice.

14Audiences

Intended users

The area profile identifies 3 user communities.

  1. institutions using closed management-system standards
  2. risk and compliance teams
  3. legal reviewers
15Restricted standards

Restricted compatibility profiles

3 standards whose text is not openly available, named and linked only. Any compatibility profile is kept on protected pages until an arrangement with the issuing body is in place.

16Data sources

Data sources

2 data sources named in the area profile, each with provider, licence, update frequency and delivery path.

Data sources

Data sources are listed for reference; live data is displayed once licence review is complete.

Live
0
on completion of licence review
Listed in the data register
0
licence terms recorded
Proposed for the register
2
licence terms to be recorded
Delivery
1 governed service · 0 plugin · 0 browser · 1 snapshot · 0 listed for reference
proposed paths in order of preference: governed data service, plugin, direct browser read, build-time snapshot; sources whose terms do not permit reuse are listed for reference only
17Indicators

Indicators

The area profile names 1 indicator, each with its framework and code.

Indicator names and codes are given as published by their stewards.

18Hazards and sectors

Hazards, threats and sectors concerned

Hazards and threats 0

This area draws on the hazards of the areas it is coupled with.

Sectors 0

This area serves all sectors through the areas it is coupled with.

19Sources

Sources

3 references from peer-reviewed and official publications cited in the area profile, linked at the publishers' own sites.

20Research hub

Recent research on this area

Recent peer-reviewed articles, preprints, datasets and reports on the subject of this area, retrieved at the time of reading from open scholarly metadata services (OpenAlex, Crossref, DataCite, Zenodo, arXiv, Europe PMC, OpenAIRE Graph) with search terms composed from the registry. Each work is listed with its authors, venue, year, type, open-access status and licence, and links to its DOI or landing page. Sources not yet enabled for live display on this site are listed for reference and are not queried.

Search termsstandards crosswalk; standards mapping; interoperability profile; NIST Cybersecurity FrameworkDerived from the title and scope of the area, the NHS-1 hazards it names and the open standards it lists.

  • OpenAlexlisted for reference; not queried
  • Crossreflisted for reference; not queried
  • DataCitelisted for reference; not queried
  • Zenodolisted for reference; not queried
  • arXivlisted for reference; not queried
  • Europe PMClisted for reference; not queried
  • OpenAIRE Graphlisted for reference; not queried

No source is enabled for live display on this site yet: the sources are listed for reference and none is queried. Once the publisher of record enables a source after its terms are reviewed, recent works are listed here. Metadata and links only: title, authors, venue, year, type, open-access status and licence as each source records them; works are listed for orientation, not reviewed or endorsed.

22Across the network

Programmes, tracks and courses for this area

GCRI Canada, The Global Risks Forum (GRF), The Global Risks Alliance (GRA) and Risk Academy work on the subject of this area in distinct roles (research and evidence; governance, policy and convening; capital, finance and markets; education and training). Each entry states why it corresponds and the step it offers; each institution sets its own terms of participation.

Governance, policy and convening

The Global Risks Forum (GRF)

Tracks that convene public authorities, researchers and institutions on the governance of shared risks.

Governance NexusCompares organisational governance arrangements, the context in which management-system requirements are applied.Join this track globalriskforum.comAll tracks of The Global Risks Forum

Capital, finance and markets

The Global Risks Alliance (GRA)

Industry programmes in which financial institutions build a shared understanding of systemic risk.

Financial Cyber and Operational ResilienceWorks on operational resilience testing and control frameworks across financial services.Join this programme globalriskalliance.comAll programmes of The Global Risks Alliance
23Key terms

Key terms

UNI
Unique Nexus Identifier: a persistent identifier that resolves an artifact to its record.
proposed
A draft in the open development process that the Global Standards Council has not yet adopted. Each area profile is a proposal to the Nexus Standards registry.
profile
Relation in which a Nexus profile narrows or extends the external standard for a defined use, validated with the issuing body's own tools where these exist.
adopt
Relation in which the external standard is used as published and values are validated against it.
crosswalk
Relation in which Nexus clauses are mapped to parts of the external standard by clause number, without reproducing its text.
compatibility profile (restricted)
Relation to a standard whose text is not openly available: the standard is named and linked only, and any compatibility profile is kept on protected pages.
change record
A public record of a proposed change under NS-13, decided by the editors with written reasons.
attestation
An evaluator's recorded result for one clause and one subject under NS-11.
liaison sought
A liaison the working group intends to request from the issuing body; a liaison is established only when the body confirms it in writing.
25Research

Recent research and sources

Peer-reviewed articles, preprints, reports and datasets on the subject of this area, retrieved at the time of reading from open scholarly metadata services (OpenAlex and Crossref) and listed with authors, venue, year, type and access status, with a link to each work. Curated references and related standards are listed first; recent works matched by subject follow and are listed for orientation.

Curated references

Related standards and frameworks

Search terms, derived from the title and scope of the area: standards crosswalk; standards mapping; interoperability profile. With JavaScript enabled, recent works matching these terms are listed from OpenAlex and Crossref.

26Questions

Questions and answers.

What is the status of the Compatibility profiles for closed standards area?
The area profile is a proposal to the Nexus Standards registry; the area is not yet listed in the registry. Standards are adopted by the Global Standards Council after last call; in each country, adoption is a decision of its National Standards Council (NSC).
How are data sources presented?
Each data source is listed with its provider, licence, update frequency and delivery path, and links to the provider's own publication.
How can this brief be amended?
Through a public change record under NS-13: a proposed amendment to the area profile or the registry, decided by the editors with written reasons.
NRNexus Reports gateway · GW-STD

Contribute to Nexus Reports from this page.

Nexus Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.

Nexus Standards
Nexus Standards

Contribute to Compatibility profiles for closed standards

Institutions and experts are invited to propose amendments, join the working group or propose data sources. National participation is organised through each country's National Nexus Consortium (NNC) and its National Working Groups (NWGs); competent national authorities are engaged through official channels.

Status and use. The Nexus Standards are proposed standards developed through an open process under NS-13 and published for voluntary use; they do not constitute certification, accreditation or regulatory approval, and adoption remains a decision of the Global Standards Council and, in each country, of its National Standards Council. A UNI (Unique Nexus Identifier) identifies an artifact; it does not certify it. Names of standards bodies and their standards belong to their stewards and are used only to identify the documents; no text of an external standard is reproduced here. Nexus Standards is not affiliated with, endorsed by or certified by any standards body named here.

Licences: CC BY 4.0 for standards text, registries, schemas and data; Apache-2.0 for reference code. External standards are cited by name, number and link under their own licences. Third-party data, libraries and fonts keep their own licences: see Third-party notices.

Skip to toolbar