The correct answer is By offering mapped references and crosswalks to other regulatory frameworks.

A national cybersecurity controls catalog provides mappings and crosswalks that link individual controls to requirements in multiple regulations and standards. These mappings let a company show how one control satisfies different regulatory requirements and they allow evidence and implementations to be reused rather than recreated for each framework.

Security Command Center is a cloud security product that helps discover and detect risks and vulnerabilities and it does not serve as a national controls catalog or provide regulatory crosswalks.

By requiring organizations to replicate controls for each framework is incorrect because catalogs exist to reduce duplication and to harmonize controls across frameworks so the same control can satisfy multiple requirements.

By advising against using parallel compliance frameworks is incorrect because catalogs are designed to support harmonization and mapping between frameworks and they do not instruct organizations to avoid using multiple frameworks.

Full AWS Practitioner Certification Question