Compound and cascading hazard: crosswalk to external standards
The external standards in the crosswalk domains of compound and cascading hazard, from the register, with the relation of each to the Nexus Standards. Each row links to the issuing body, and each relation is evidenced by attestations identified by UNIs (Unique Nexus Identifier).
- Nexus Standards: NS-0, NS-3, NS-9, NS-11.
- Open standards: UNDRR-ISC Hazard Information Profiles; WMO Cataloguing of Hazardous Events (WMO-CHE); PROV-O: The PROV Ontology; Sendai Framework for Disaster Risk Reduction 2015–2030.
- Data and feeds: Copernicus EMS rapid mapping activations; OpenStreetMap planet and replication; ERA5 reanalysis (Copernicus Climate Data Store).
- Couples with: Hydrometeorological hazard; Geophysical hazard; Critical infrastructure and critical entities; Global and systemic risk.
The process.
The crosswalk as a table: 32 external standards by domain
| Domain | External standard | Issuing body | Relation |
|---|---|---|---|
| Critical infrastructure | Directive 2012/18/EU on the control of major-accident… | European Parliament and Council | cite |
| Critical infrastructure | ICAO Annex 19 Safety Management | International Civil Aviation Organization | cite |
| Critical infrastructure | IEC 61508 Functional safety of electrical, electronic and… | IEC TC 65 | crosswalk |
| Critical infrastructure | IEC 61511 Functional safety – Safety instrumented systems… | IEC TC 65 | crosswalk |
| Critical infrastructure | IEC 62443 series Security for industrial automation and… | IEC TC 65 with ISA (ISA/IEC 62443) | cite |
| Critical infrastructure | IEEE 1588 Precision Clock Synchronization Protocol for… | IEEE | cite |
| Critical infrastructure | International Safety Management (ISM) Code | International Maritime Organization | cite |
| Critical infrastructure | ISO 10218 Robotics – Safety requirements for industrial… | ISO/TC 299 | cite |
| Critical infrastructure | ISO 13482:2014 Robots and robotic devices – Safety… | ISO/TC 299 | cite |
| Critical infrastructure | ISO 19650 Organisation and digitisation of information… | ISO/TC 59/SC 13 | cite |
| Critical infrastructure | ISO 37120:2018 Sustainable cities and communities… | ISO/TC 268 | crosswalk |
| Critical infrastructure | ISO 37123:2019 Sustainable cities and communities… | ISO/TC 268 | crosswalk |
| Critical infrastructure | ISO 55000:2024 Asset management – Vocabulary, overview and… | ISO/TC 251 | cite |
| Critical infrastructure | ITU Radio Regulations | ITU-R | cite |
| Critical infrastructure | ITU-T G.8271 Time and phase synchronisation aspects of… | ITU-T SG15 | cite |
| Enterprise and organisational risk | COSO Enterprise Risk Management – Integrating with… | Committee of Sponsoring Organizations of the Treadway Commission (COSO) | crosswalk |
| Enterprise and organisational risk | IEC 31010:2019 Risk management – Risk assessment techniques | IEC TC 56 with ISO/TC 262 (double logo) | cite |
| Enterprise and organisational risk | ISO 31000:2018 Risk management – Guidelines | ISO/TC 262 | crosswalk |
| Enterprise and organisational risk | ISO 31022:2020 Risk management – Guidelines for the… | ISO/TC 262 | cite |
| Enterprise and organisational risk | ISO 31050:2023 Risk management – Guidelines for managing… | ISO/TC 262 | crosswalk |
| Enterprise and organisational risk | ISO 31073:2022 Risk management – Vocabulary | ISO/TC 262 | crosswalk |
| Enterprise and organisational risk | ISO 37000:2021 Governance of organisations – Guidance | ISO/TC 309 | cite |
| Enterprise and organisational risk | ISO 37001:2025 Anti-bribery management systems… | ISO/TC 309 | cite |
| Enterprise and organisational risk | ISO 37301:2021 Compliance management systems… | ISO/TC 309 | cite |
| Enterprise and organisational risk | ISO 45001:2018 Occupational health and safety management… | ISO/PC 283 | crosswalk |
| Supply chains and logistics | ISO 28000:2022 Security and resilience – Security… | ISO/TC 292 | crosswalk |
| Supply chains and logistics | ISO/IEC 27036-2:2022 Cybersecurity – Supplier… | ISO/IEC JTC 1/SC 27 | cite |
| Supply chains and logistics | NIST SP 800-161 Rev. 1 Cybersecurity Supply Chain Risk… | NIST | cite |
| Supply chains and logistics | OASIS Common Security Advisory Framework (CSAF) Version 2.0 | OASIS CSAF TC | cite |
| Supply chains and logistics | OpenVEX specification | OpenVEX community (OpenSSF project) | cite |
| Supply chains and logistics | Supply-chain Levels for Software Artifacts (SLSA) | OpenSSF (Linux Foundation) | adopt |
| Supply chains and logistics | WCO SAFE Framework of Standards to Secure and Facilitate… | World Customs Organization | cite |
Nexus Standards in the graph: NS-0, NS-3, NS-9, NS-11. A relation is a register entry, never a compliance claim.
4 Nexus Standards · 3 domains · 32 external standards · 24 issuing bodies · 0 implementing repositories. Relations (adopt, profile, crosswalk, cite) are as recorded in the register; names and standards remain with their stewards.
Crosswalk graph63 nodes and 76 links from the registry of external standards, programme areas and implementations (the external standards register, the consumers register. Relations (adopt, profile, crosswalk, cite) are shown as recorded in the register.
- Nexus Standards
- 4
- NS-0, NS-3, NS-9
- Open standards
- 4
- named, never copied
- Data and feeds
- 3
- listed for reference
- Couplings
- 4
- with other areas
Supply chains and logistics
7 register entries.
| Standard | Body | Version | Relation | Access | Verified |
|---|---|---|---|---|---|
| ISO/IEC 27036-2:2022 Cybersecurity – Supplier relationships – Part 2: Requirements | ISO/IEC JTC 1/SC 27 | 2022 (Part 1 2021, Part 3 2023, Part 4 cloud) | cite | paywalled | verified |
| NIST SP 800-161 Rev. 1 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations | NIST | Rev. 1 (May 2022), Update 1 (1 November 2024) | cite | open | verified |
| OASIS Common Security Advisory Framework (CSAF) Version 2.0 | OASIS CSAF TC | 2.0 (OASIS Standard, November 2022) | cite | open | verified |
| OpenVEX specification | OpenVEX community (OpenSSF project) | draft | cite | open | unverified |
| Supply-chain Levels for Software Artifacts (SLSA) | OpenSSF (Linux Foundation) | 1.1 (April 2025, Approved Specification); site states 1.2 is current | adopt | open | verified |
| ISO 28000:2022 Security and resilience – Security management systems | ISO/TC 292 | 2022 | compatibility profile (restricted) | paywalled | unverified |
| WCO SAFE Framework of Standards to Secure and Facilitate Global Trade | World Customs Organization | 2021 | cite | open | unverified |
Unverified entries rest on a secondary source for at least one field, as indicated in the register.
Enterprise and organisational risk
10 register entries.
| Standard | Body | Version | Relation | Access | Verified |
|---|---|---|---|---|---|
| ISO 31000:2018 Risk management – Guidelines | ISO/TC 262 | 2018 (second edition; revision at working-draft stage) | compatibility profile (restricted) | paywalled | verified |
| IEC 31010:2019 Risk management – Risk assessment techniques | IEC TC 56 with ISO/TC 262 (double logo) | 2019 (edition 2.0) | cite | paywalled | verified |
| ISO 31022:2020 Risk management – Guidelines for the management of legal risk | ISO/TC 262 | 2020 (first edition) | cite | paywalled | verified |
| COSO Enterprise Risk Management – Integrating with Strategy and Performance | Committee of Sponsoring Organizations of the Treadway Commission (COSO) | 2017 (released 6 September 2017) | compatibility profile (restricted) | paywalled | unverified |
| ISO 37301:2021 Compliance management systems – Requirements with guidance for use | ISO/TC 309 | 2021 | cite | paywalled | unverified |
| ISO 37000:2021 Governance of organisations – Guidance | ISO/TC 309 | 2021 | cite | paywalled | verified |
| ISO 37001:2025 Anti-bribery management systems – Requirements with guidance for use | ISO/TC 309 | 2025 (published 28 February 2025; replaces 2016 edition with 2024 amendment) | cite | paywalled | verified |
| ISO 31073:2022 Risk management – Vocabulary | ISO/TC 262 | 2022 | compatibility profile (restricted) | paywalled | unverified |
| ISO 31050:2023 Risk management – Guidelines for managing an emerging risk to enhance resilience | ISO/TC 262 | 2023 | compatibility profile (restricted) | paywalled | unverified |
| ISO 45001:2018 Occupational health and safety management systems | ISO/PC 283 | 2018 | compatibility profile (restricted) | paywalled | unverified |
Unverified entries rest on a secondary source for at least one field, as indicated in the register.
Critical infrastructure
15 register entries.
Unverified entries rest on a secondary source for at least one field, as indicated in the register.
Relation types and their evidence
| Relation | Meaning | Evidence |
|---|---|---|
cite | The Nexus Standard refers to the external standard as context. | Identifier, version and URL in the register. |
profile | The Nexus Standard constrains or specialises an open external standard (for example STAC, DCAT, PROV-O, DataCite, CAP). | Conformance tests against the external standard’s own validator where one exists. |
crosswalk | Elements of the external standard map to Nexus elements (clauses, record fields). | A crosswalk table in the register entry; each row cites the external clause by number, never by text. |
adopt | The Nexus Standards use the external standard as it is for a function (for example ISO 3166-1, SPDX, ORCID, ROR). | Validation of values against the external scheme. |
extend | A Nexus Standard adds machine-readable, real-time or provenance elements that the external standard lacks. | The extension is a Nexus clause or field; the external standard is cited as the baseline. |
gap | No external standard covers the concern; a Nexus Standard specifies it. | The gap statement in the landscape study. |
Questions and answers.
Does a crosswalk establish that a compound and cascading hazard artefact conforms to these standards?
Why are some relations shown as compatibility profile (restricted)?
Why are some entries marked unverified?
Around compound and cascading hazard.
Shape the standards for compound and cascading hazard.
Governments, regulators, standards bodies, industry, academia and communities are invited to shape the catalogue ahead of its first official release, targeted for 2030: comment on a draft, propose a change, join a working group or host a field exercise.
Status and use. The Nexus Standards are proposed standards developed through an open process under NS-13 and published for voluntary use; they do not constitute certification, accreditation or regulatory approval, and adoption remains a decision of the Global Standards Council and, in each country, of its National Standards Council. A UNI (Unique Nexus Identifier) identifies an artefact; it does not certify it. Names of standards bodies and their standards belong to their stewards and are used only to identify the documents; no text of an external standard is reproduced here. Nexus Standards is not affiliated with, endorsed by or certified by any standards body named here.
Licences: CC BY 4.0 for standards text, registries, schemas and data; Apache-2.0 for reference code. External standards are cited by name, number and link under their own licences. Third-party data, libraries and fonts keep their own licences: see Third-party notices.