01 / Versioned sources
Framework registry
FrameworkVersionStatusSource
02 / Mapping status
Evidence state
- Supported
- Published evidence directly supports the mapped control or weakness.
- Partial
- Evidence supports only part of the control or risk described by the framework.
- Candidate mapping
- An unverified risk alignment proposed by a category rule or external source.
- Not applicable
- A rule or analyst review determined that the mapping does not apply.
03 / Boundaries
Mappings are evidence statements
A record does not need every framework. Unverified entries appear as Candidate mapping and are not evidence of compliance, certification, or endorsement. Category-level candidates are listed in the public taxonomy.
