control-framework-mapping

Map controls against frameworks (ISO 27001, SOC 2, NIST CSF, NIST 800-53, CIS v8, PCI-DSS v4, HIPAA Security Rule, NIS2, ISO 27701, ISO 42001). Produces control inventory, mapping matrix, coverage counts, gap analysis with recommended controls and effort, maturity scoring, and cross-framework consolidation flagging high-leverage controls. Not a certified audit. Mermaid diagrams with optional PNG export.