What "mapping under validation" means
Why some controls carry a caveat, and why that is the honest choice.
Last updated September 22, 2026
Some controls carry a label saying the mapping behind them is still under validation. It is worth understanding what that means, because the temptation is to read it as a defect.
What the label says
A mapping connects a framework's requirement to the capabilities that satisfy it. That connection is a judgment, made by people, and it goes through review before it is treated as settled. Until that review completes, the label says so.
Why we show it rather than hide it
A readiness figure presented without a caveat implies a confidence that has not been earned. Leaving the label on is less comfortable and more accurate, and it means that when a mapping is approved, the change is meaningful rather than cosmetic.
What to do with it
Treat a control under validation as directionally useful and not yet citable. It is a good guide to where to look. It is not something to put in front of an assessor as settled.