Skip to content

docs: regenerate FRAMEWORK-COVERAGE.md #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
github-actions wants to merge 1 commit into
base: main
Choose a base branch
from
Open

docs: regenerate FRAMEWORK-COVERAGE.md #2

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions docs/FRAMEWORK-COVERAGE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

> **Auto-generated.** Regenerated by `node plugins/grc-engineer/scripts/generate-coverage.js`. Do not hand-edit — your changes will be overwritten on the next release.

Last generated: 2026-07-05
Last generated: 2026-07-26

This page tracks which of the 249 frameworks in the [Secure Controls Framework](https://securecontrolsframework.com) crosswalk have a dedicated plugin in this repo. Frameworks without a dedicated plugin are **already usable today** via `/grc-engineer:gap-assessment <scf-framework-id>` through the SCF crosswalk.

Expand All @@ -11,8 +11,8 @@ This page tracks which of the 249 frameworks in the [Secure Controls Framework](
| | |
|---|---|
| Total SCF-mapped frameworks | 249 |
| With dedicated plugin | **28** (11.2%) |
| Crosswalk-only (no plugin yet) | 221 |
| With dedicated plugin | **29** (11.6%) |
| Crosswalk-only (no plugin yet) | 220 |
| Shipped plugins without SCF mapping | 6 |

### By depth
Expand All @@ -21,7 +21,7 @@ This page tracks which of the 249 frameworks in the [Secure Controls Framework](
|---|---|---|
| Full | 0 | Framework-native workflow commands + Reference content |
| Reference | 26 | Scope + evidence checklist + framework-specific SKILL |
| Stub | 2 | Scaffolded delegation to `/grc-engineer:gap-assessment` |
| Stub | 3 | Scaffolded delegation to `/grc-engineer:gap-assessment` |

See [Framework Plugin Guide](FRAMEWORK-PLUGIN-GUIDE.md) for depth definitions and level-up checklists.

Expand All @@ -46,6 +46,7 @@ See [Framework Plugin Guide](FRAMEWORK-PLUGIN-GUIDE.md) for depth definitions an
| `/iso27001:` | reference | `general-iso-27001-2022` | ISO 27001 (2022) |
| `/jp-appi:` | reference | `apac-jpn-ppi-2020` | Japan - Act on the Protection of Personal Information (2020) |
| `/nist-800-53:` | reference | `general-nist-800-53-r5-2` | NIST SP 800-53 R5 |
| `/nist-ai-rmf:` | stub | `general-nist-100-1-ai-rmf` | NIST AI 100-1 (AI RMF 1.0) |
| `/nist-csf-20:` | reference | `general-nist-csf-2-0` | NIST Cybersecurity Framework (v2.0) |
| `/nydfs:` | reference | `usa-state-ny-dfs-23-nycrr500-2023-amd2` | New York Department of Financial Services 23NYCRR Part 500 (2023 Amendment 2) |
| `/pci-dss:` | reference | `general-pci-dss-4-0-1` | Payment Card Industry Data Security Standard (PCI DSS) (v4.01) |
Expand Down Expand Up @@ -73,7 +74,7 @@ These plugins exist in the marketplace but do not have a `framework_metadata.scf

## Not started

221 frameworks are supported today via the SCF crosswalk but have no dedicated plugin. To adopt one:
220 frameworks are supported today via the SCF crosswalk but have no dedicated plugin. To adopt one:

```bash
node plugins/grc-engineer/scripts/scaffold-framework.js <scf-framework-id>
Expand Down Expand Up @@ -249,7 +250,7 @@ Or keep using the crosswalk directly:

</details>

### Global — 84 frameworks
### Global — 83 frameworks

<details><summary>Expand</summary>

Expand Down Expand Up @@ -290,7 +291,6 @@ Or keep using the crosswalk directly:
| `general-iso-31010-2009` | ISO 31010 (2009) | 31 → 32 |
| `general-iso-42001-2023` | ISO 42001 (2023) | 149 → 140 |
| `general-mitre-att&ck-16-1` | MITRE ATT&CK (v16.1) | 108 → 511 |
| `general-nist-100-1-ai-rmf` | NIST AI 100-1 (AI RMF 1.0) | 158 → 91 |
| `general-nist-600-1-gen-ai-profile` | NIST AI 600-1 | 139 → 250 |
| `general-nist-privacy-framework-1-0` | NIST Privacy Framework (v1.0) | 152 → 122 |
| `general-nist-800-160-vol-2-r1` | NIST SP 800-160 (Vol 2, Rev 1) | 204 → 196 |
Expand Down