Compliance framework mappings· 127 controls

Each regulatory obligation is mapped to the MITRE ATT&CK techniques that test it, the D3FEND mitigations that defend it, and the CWE weaknesses beneath it. Confidence-scored and continuously reviewed.