Like any mapping out there, you need to make a QA and see if you are comfortable with it. UCF costs 10kUSD/year and is far from flawless.

SCF looks decent 🙂

you can check this one from AuditScripts called AuditScripts Critical Security Controls Master Mapping

source page: https://www.auditscripts.com/free-resources/critical-security-controls/ 

UCF (if I recall) provides citations but with same content as the COs. So you can do the same things in few minutes if you want to 🙂