Nexus StandardsPolitical and governance risk standardsCrosswalk
Political and governance risk

Political and governance risk: crosswalk to external standards

The external standards in the crosswalk domains of political and governance risk, from the register, with the relation each has to the Nexus Standards; every row links the source body, and relations are evidenced by attestations with their own UNIs (Unique Nexus Identifier). Names of standards bodies and their standards belong to their stewards and are used only to identify the documents; no text of an external standard is reproduced here. Nexus Standards is not affiliated with, endorsed by or certified by any standards body named here.

Back to Political and governance risk All subsites
Crosswalk graph · political and governance riskFrom the registry
Political and governance risk: the crosswalk79 nodes on four orbits (Nexus Standards and consumers inside, then domains, external standards and issuing bodies) joined by 99 register links.
Nexus StandardsDomainsExternal standardsIssuing bodiesConsumers

4 Nexus Standards · 3 domains · 42 external standards · 29 issuing bodies · 1 consumers. Relations are register entries (adopt, profile, crosswalk, cite), never compliance claims; names belong to their stewards.

Crosswalk graph79 nodes and 99 links from registry/external-standards.yaml, registry/subsites.yaml and registry/consumers.yaml. Relations (adopt, profile, crosswalk, cite) are register entries, never compliance claims.

01Humanitarian

Humanitarian: 10 entries.

StandardBodyVersionRelationAccessVerified
ISO 22395:2018 Security and resilience - Community resilience - Guidelines for supporting vulnerable persons in an emergencyISO/TC 2922018citepaywalledunverified
ISO 22396:2020 Security and resilience - Community resilience - Guidelines for information exchange between organizationsISO/TC 2922020citepaywalledunverified
The Sphere Handbook - Humanitarian Charter and Minimum Standards in Humanitarian ResponseSphere Association2018 (fourth edition); revision under way, date UNVERIFIEDciteopenverified
Core Humanitarian Standard on Quality and Accountability (CHS)CHS Alliance, Groupe URD and Sphere2024 edition (March 2024); 2014 edition with 2018 guidance notes remains in the Sphere Handbookciteopenverified
Humanitarian Exchange Language (HXL) 1.1HXL Working Group (UN OCHA Centre for Humanitarian Data)1.1 (final 30 April 2018)adoptopenverified
IATI StandardInternational Aid Transparency Initiative2.03 (February 2018)crosswalkopenverified
IASC Operational Guidance on Data Responsibility in Humanitarian ActionInter-Agency Standing Committee (Data Responsibility Working Group)revised edition April 2023 (first edition February 2021); two-year review cycleciteopenverified
United Nations Declaration on the Rights of Indigenous PeoplesUnited Nations General Assembly2007citeopenunverified
UN Guiding Principles on Business and Human RightsUN Human Rights Council2011citeopenunverified
Global Compact for Safe, Orderly and Regular MigrationUnited Nations General Assembly2018citeopenunverified

Unverified entries rest on a secondary source for at least one field; the register says which.

02Canvas

Crosswalk evidence.

Canvas · crosswalk evidenceDesign, not a record
Political and governance risk: how a relation to an external standard is evidencedRegister entries for the area by domain and relation; NS-14 says what evidence each relation needs and how a claim may be displayed. Names and standards belong to their stewards.

Fig.Register relations for the area and the evidence NS-14 requires before a claim is displayed. Design, not a record.

03Security and cyber

Security and cyber: 16 entries.

StandardBodyVersionRelationAccessVerified
ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection - Information security management systems - RequirementsISO/IEC JTC 1/SC 272022 (edition 3.0, 25 October 2022)compatibility profile (restricted)paywalledverified
ISO/IEC 27005:2022 Guidance on managing information security risksISO/IEC JTC 1/SC 272022 (replaces 2018 edition)citepaywalledverified
ISO/IEC 27701:2025 Privacy information management systemsISO/IEC JTC 1/SC 272025 (standalone edition; 2019 edition was an extension of 27001/27002)citepaywalledverified
NIST Cybersecurity Framework (CSF) 2.0 (NIST CSWP 29)NIST2.0 (26 February 2024)crosswalkopenverified
NIST SP 800-37 Rev. 2 Risk Management Framework for Information Systems and OrganizationsNISTRevision 2citeopenunverified
NIST SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and OrganizationsNISTRev. 5 (September 2020) with Release 5.2.0 (27 August 2025)crosswalkopenverified
NIST Open Security Controls Assessment Language (OSCAL)NIST1.1.x (1.1.2 confirmed in tooling; 1.1.3 UNVERIFIED)adoptopenverified
OASIS STIX Version 2.1 (Structured Threat Information Expression)OASIS Cyber Threat Intelligence TC2.1 (OASIS Standard, 10 June 2021)citeopenverified
OASIS TAXII Version 2.1 (Trusted Automated Exchange of Intelligence Information)OASIS Cyber Threat Intelligence TC2.1 (OASIS Standard, 10 June 2021)citeopenverified
Common Vulnerability Scoring System v4.0FIRST CVSS Special Interest Group4.0citeopenunverified
FIPS 203 Module-Lattice-Based Key-Encapsulation Mechanism StandardNIST2024adoptopenunverified
FIPS 204 Module-Lattice-Based Digital Signature StandardNIST2024adoptopenunverified
FIPS 205 Stateless Hash-Based Digital Signature StandardNIST2024adoptopenunverified
IAEA Safety Standards (nuclear, radiation, transport and waste safety)International Atomic Energy Agencycurrentciteopenunverified
United Nations Global Counter-Terrorism StrategyUnited Nations General Assemblycurrentciteopenunverified
RFC 8032 Edwards-Curve Digital Signature Algorithm (EdDSA)IETF2017adoptopenunverified

Unverified entries rest on a secondary source for at least one field; the register says which.

04Finance and capital

Finance and capital: 16 entries.

StandardBodyVersionRelationAccessVerified
Regulation (EU) 2022/2554 (Digital Operational Resilience Act)European Parliament and Councilapplies from 17 January 2025citeopenunverified
ISO 14097:2021 Framework including principles and requirements for assessing and reporting investments and financing activities related to climate changeISO/TC 207/SC 72021citepaywalledunverified
Basel III: international regulatory framework for banks (consolidated Basel Framework)Basel Committee on Banking Supervision (BIS)December 2017 finalisation integrated into the consolidated Basel Framework; implementation deferred to January 2023citeopenverified
BCBS 239 Principles for effective risk data aggregation and risk reportingBasel Committee on Banking Supervision (BIS)January 2013; compliance from 1 January 2016 for G-SIBsadoptopenverified
Directive 2009/138/EC (Solvency II)European Parliament and Council; EIOPA2009; applied from 1 January 2016; review agreed December 2023citeopenverified
IOSCO Objectives and Principles of Securities RegulationInternational Organization of Securities Commissions2017 revision (31 May 2017); 38 principles in ten categoriesciteopenverified
FSB Key Attributes of Effective Resolution Regimes for Financial InstitutionsFinancial Stability Board2011; 2014 annexes; revised version 25 April 2024 (FMI annex only)citeopenverified
Open Contracting Data Standard (OCDS)Open Contracting Partnership1.1.5 (20 August 2020); 1.2 in developmentcrosswalkopenverified
Oasis Loss Modelling Framework (open catastrophe model framework and data standards)Oasis LMF (not-for-profit)currentcrosswalkopenunverified
BCBS Principles for the effective management and supervision of climate-related financial risksBasel Committee on Banking Supervision2022crosswalkopenunverified
IAIS Insurance Core Principles and Common FrameworkInternational Association of Insurance Supervisors2019crosswalkopenunverified
IMF-World Bank Debt Sustainability FrameworkIMF and World Bankcurrentciteopenunverified
IFC Performance Standards on Environmental and Social SustainabilityInternational Finance Corporation2012crosswalkopenunverified
World Bank Environmental and Social FrameworkWorld Bank2018crosswalkopenunverified
Equator Principles EP4Equator Principles AssociationEP4citeopenunverified
FATF RecommendationsFinancial Action Task Forcecurrentciteopenunverified

Unverified entries rest on a secondary source for at least one field; the register says which.

05Relations

What each relation means and what evidences it.

RelationMeaningEvidence
citeThe Nexus Standard refers to the external standard as context.URL and identifier in the register.
profileThe Nexus Standard constrains or specialises an open external standard (STAC, DCAT, PROV-O, DataCite, CAP).Conformance tests against the external standard's own validator where one exists.
crosswalkElements of the external standard map to Nexus elements (clauses, record fields).A crosswalk table in the register entry; each row cites the external clause by number, never by text.
adoptThe ecosystem uses the external standard as-is for a function (ISO 3166, SPDX, ORCID, ROR).Validation of values against the external scheme.
extendNexus adds machine-readable, real-time or provenance elements the external standard lacks.The extension is a Nexus clause or field; the external standard is cited as the baseline.
gapNo external standard covers the concern; Nexus specifies it.The gap statement in the landscape study.
06Learn and apply

Where Political and governance risk is taught, worked on and run.

Risk Academy disciplines that teach Political and governance risk, with their courses; the GCRI Canada, The Global Risks Forum (GRF) and The Global Risks Alliance (GRA) subsites that carry those disciplines; and the Nexus Foundry systems the standards name. Mappings are proposed for review (Risk Academy standards map, 2026-10-17); a link says a page on the same subject exists, never an endorsement or a conformance statement; framework names in course titles are named and linked, never reproduced.

Risk Academy

Disciplines and courses

07Questions

Questions and answers.

Does a crosswalk make a political and governance risk artifact conformant to these standards?
No. A crosswalk is a mapping, not a conformance statement. A relation may be displayed only as clauses derived from the external standard and their current results, never as a compliance or certification statement unless the body entitled to decide has done so.
Why do some relations read compatibility profile (restricted)?
The standard is paywalled. Nexus Standards do not reproduce its text; a compatibility profile of it is built on simulated data and kept on restricted pages, and it is activated publicly only after an institutional arrangement with the issuing body is recorded (owner decision of 2026-10-16, counsel review pending).
Why are some entries unverified?
An unverified entry rests on a secondary source for at least one of name, body, version or year; NS14-R5 requires it to be shown as unverified.
Related

Around Political and governance risk.

Nexus Standards

Shape the standards for political and governance risk.

Every standard here is proposed. Changes enter as proposals under NS-13; conformance is shown by attestations under NS-11; nothing on this site is a certification, an approval or a readiness statement.

Propose a change See contact routes

Nexus Standards documents CC BY 4.0 · tooling Apache-2.0 · counsel review pending (DEC-2026-10-16-NEXUS-STANDARDS-OPEN-LICENCE). External standards are named and linked under their own licences; a UNI (Unique Nexus Identifier) identifies, it never certifies. · Generated from the Nexus Standards corpus at commit 437ae044c5cb (2026-10-17); proposed and open.

Skip to toolbar