The external standards in the crosswalk domains of industry and manufacturing, from the register, with the relation each has to the Nexus Standards; every row links the source body, and relations are evidenced by attestations with their own UNIs (Unique Nexus Identifier). Names of standards bodies and their standards belong to their stewards and are used only to identify the documents; no text of an external standard is reproduced here. Nexus Standards is not affiliated with, endorsed by or certified by any standards body named here.
4 Nexus Standards · 3 domains · 38 external standards · 24 issuing bodies · 1 consumers. Relations are register entries (adopt, profile, crosswalk, cite), never compliance claims; names belong to their stewards.
Crosswalk graph70 nodes and 90 links from registry/external-standards.yaml, registry/subsites.yaml and registry/consumers.yaml. Relations (adopt, profile, crosswalk, cite) are register entries, never compliance claims.
Unverified entries rest on a secondary source for at least one field; the register says which.
Fig.Register relations for the area and the evidence NS-14 requires before a claim is displayed. Design, not a record.
| Standard | Body | Version | Relation | Access | Verified |
|---|---|---|---|---|---|
| ISO/IEC 27036-2:2022 Cybersecurity - Supplier relationships - Part 2: Requirements | ISO/IEC JTC 1/SC 27 | 2022 (Part 1 2021, Part 3 2023, Part 4 cloud) | cite | paywalled | verified |
| NIST SP 800-161 Rev. 1 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations | NIST | Rev. 1 (May 2022), Update 1 (1 November 2024) | cite | open | verified |
| OASIS Common Security Advisory Framework (CSAF) Version 2.0 | OASIS CSAF TC | 2.0 (OASIS Standard, November 2022) | cite | open | verified |
| OpenVEX specification | OpenVEX community (OpenSSF project) | draft | cite | open | unverified |
| Supply-chain Levels for Software Artifacts (SLSA) | OpenSSF (Linux Foundation) | 1.1 (April 2025, Approved Specification); site states 1.2 is current | adopt | open | verified |
| ISO 28000:2022 Security and resilience - Security management systems | ISO/TC 292 | 2022 | compatibility profile (restricted) | paywalled | unverified |
| WCO SAFE Framework of Standards to Secure and Facilitate Global Trade | World Customs Organization | 2021 | cite | open | unverified |
Unverified entries rest on a secondary source for at least one field; the register says which.
Unverified entries rest on a secondary source for at least one field; the register says which.
| Relation | Meaning | Evidence |
|---|---|---|
cite | The Nexus Standard refers to the external standard as context. | URL and identifier in the register. |
profile | The Nexus Standard constrains or specialises an open external standard (STAC, DCAT, PROV-O, DataCite, CAP). | Conformance tests against the external standard's own validator where one exists. |
crosswalk | Elements of the external standard map to Nexus elements (clauses, record fields). | A crosswalk table in the register entry; each row cites the external clause by number, never by text. |
adopt | The ecosystem uses the external standard as-is for a function (ISO 3166, SPDX, ORCID, ROR). | Validation of values against the external scheme. |
extend | Nexus adds machine-readable, real-time or provenance elements the external standard lacks. | The extension is a Nexus clause or field; the external standard is cited as the baseline. |
gap | No external standard covers the concern; Nexus specifies it. | The gap statement in the landscape study. |
Risk Academy disciplines that teach Industry and manufacturing, with their courses; the GCRI Canada, The Global Risks Forum (GRF) and The Global Risks Alliance (GRA) subsites that carry those disciplines; and the Nexus Foundry systems the standards name. Mappings are proposed for review (Risk Academy standards map, 2026-10-17); a link says a page on the same subject exists, never an endorsement or a conformance statement; framework names in course titles are named and linked, never reproduced.
Every standard here is proposed. Changes enter as proposals under NS-13; conformance is shown by attestations under NS-11; nothing on this site is a certification, an approval or a readiness statement.
Nexus Standards documents CC BY 4.0 · tooling Apache-2.0 · counsel review pending (DEC-2026-10-16-NEXUS-STANDARDS-OPEN-LICENCE). External standards are named and linked under their own licences; a UNI (Unique Nexus Identifier) identifies, it never certifies. · Generated from the Nexus Standards corpus at commit 437ae044c5cb (2026-10-17); proposed and open.