{
  "schema": "compliance-crosswalk/v1",
  "tool": "backupcheck",
  "frameworks": [
    {
      "id": "DORA",
      "name": "Digital Operational Resilience Act (Reg. 2022/2554)",
      "controls": [
        { "ref": "Art. 12", "name": "Backup policies, restoration & recovery procedures + methods", "how": "restore-test subcommand executes DORA-mandated restore drills against a chosen backup; jfind output records success + drift.", "coverage": "evidences" }
      ]
    },
    {
      "id": "NIS2",
      "name": "NIS2 Directive (Dir. 2022/2555)",
      "controls": [
        { "ref": "Art. 21 §2(c)", "name": "Business continuity, e.g. backup management + disaster recovery", "how": "Restore-drill evidence supports the NIS2 backup / recovery control.", "coverage": "evidences" }
      ]
    },
    {
      "id": "ISO27001",
      "name": "ISO/IEC 27001:2022",
      "controls": [
        { "ref": "A.8.13", "name": "Information backup", "how": "Restore-drill evidence covers the backup-testing sub-control.", "coverage": "evidences" }
      ]
    }
  ]
}