Will require some Open source authoritative source which can be relied upon. In the past PCI themselves had published the mapping between PCI DSS V3.2 and NIST SP 800 -53 Rev4. But they have not done this yet for PCI DSS V4. Cannot use SCF or UCF as they do not provide direct mapping between these standards instead they map it to their common controls.
[link] [comments]