map_frameworks
Map security controls between frameworks to identify satisfied requirements and gaps, using SCF as a common reference for compliance mapping and gap analysis.
Instructions
Map controls between two frameworks via SCF as a rosetta stone. Shows which target framework requirements are satisfied by source framework controls, and identifies gaps where no mapping exists. Useful for gap analysis and compliance mapping. Results are capped at 20 mappings; use source_control to filter to a specific control for detailed mapping. Returns 'not found' if either framework key is invalid. Typical response: ~1500-3000 tokens.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| source_framework | Yes | Source framework key - the framework you HAVE implemented (e.g., 'iso_27001_2022'). Use list_frameworks to discover keys. | |
| source_control | No | Optional: filter to a specific source control ID (e.g., 'A.5.15' for ISO 27001, 'PR.AC-1' for NIST CSF) to see its specific mappings to the target framework. | |
| target_framework | Yes | Target framework key - the framework you want to SATISFY (e.g., 'dora', 'nist_800_53_r5'). Use list_frameworks to discover keys. |