{
  "schema": "compliance-crosswalk/v1",
  "tool": "avwatch",
  "frameworks": [
    {
      "id": "ISO27001",
      "name": "ISO/IEC 27001:2022",
      "controls": [
        { "ref": "A.8.7",  "name": "Protection against malware",           "how": "Baseline diff + signature-scan integration surfaces malware indicators.", "coverage": "evidences" },
        { "ref": "A.8.15", "name": "Logging",                              "how": "HMAC-chained audit log per action.", "coverage": "evidences" }
      ]
    },
    {
      "id": "NIS2",
      "name": "NIS2 Directive (Dir. 2022/2555)",
      "controls": [
        { "ref": "Art. 21 §2(b)", "name": "Incident handling",              "how": "Detection routes feed IR workflows.", "coverage": "supports" }
      ]
    },
    {
      "id": "DORA",
      "name": "Digital Operational Resilience Act",
      "controls": [
        { "ref": "Art. 10", "name": "Detection",                            "how": "Continuous endpoint monitoring supports the detection control.", "coverage": "evidences" }
      ]
    }
  ]
}