Knowledge Graph to Facilitate Cloud Security Compliance with NIST Cybersecurity Framework
William Wong, Zakaria Alomari, Yunlong Shao, Muhammad Islam Satti · 2024
Cybersecurity compliance has become increasingly complex due to evolving threats, overlapping standards, and rapidly changing requirements driven by emerging technologies like artificial intelligence. Organizations face significant challenges in efficiently mapping compliance requirements to specific security controls. This paper addresses this issue within the cloud industry by presenting a systematic approach to deploying a knowledge graph or ontology that maps cloud security controls at the granular implementation level to the NIST Cybersecurity Framework. Unlike previous efforts focused on high-level mappings, this approach enhances compliance efficiency and supports integration with common software languages such as HTTP and Java. The proposed methodology can also be adapted to other compliance standards.