{"framework":"nist-csf","framework_label":"NIST CSF","controls":[{"control_id":"DE.AE-02","title":"Adverse Event Analysis","family":"DE","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"DE"},{"control_id":"DE.AE-03","title":"Adverse Event Analysis","family":"DE","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"DE"},{"control_id":"DE.AE-04","title":"Adverse Event Analysis","family":"DE","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"DE"},{"control_id":"DE.AE-06","title":"Adverse Event Analysis","family":"DE","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"DE"},{"control_id":"DE.AE-07","title":"Adverse Event Analysis","family":"DE","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"DE"},{"control_id":"DE.AE-08","title":"Adverse Event Analysis","family":"DE","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"DE"},{"control_id":"DE.CM-01","title":"Continuous Monitoring","family":"DE","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"DE"},{"control_id":"DE.CM-02","title":"Continuous Monitoring","family":"DE","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"DE"},{"control_id":"DE.CM-03","title":"Continuous Monitoring","family":"DE","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"DE"},{"control_id":"DE.CM-06","title":"Continuous Monitoring","family":"DE","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"DE"},{"control_id":"DE.CM-09","title":"Continuous Monitoring","family":"DE","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"DE"},{"control_id":"GV.OC-01","title":"Organizational Context","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.OC-02","title":"Organizational Context","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.OC-03","title":"Organizational Context","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.OC-04","title":"Organizational Context","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.OC-05","title":"Organizational Context","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.OV-01","title":"Oversight","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.OV-02","title":"Oversight","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.OV-03","title":"Oversight","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.PO-01","title":"Policy","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.PO-02","title":"Policy","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.RM-01","title":"Risk Management Strategy","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.RM-02","title":"Risk Management Strategy","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.RM-03","title":"Risk Management Strategy","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.RM-04","title":"Risk Management Strategy","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.RM-05","title":"Risk Management Strategy","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.RM-06","title":"Risk Management Strategy","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.RM-07","title":"Risk Management Strategy","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.RR-01","title":"Roles, Responsibilities, and Authorities","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.RR-02","title":"Roles, Responsibilities, and Authorities","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.RR-03","title":"Roles, Responsibilities, and Authorities","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.RR-04","title":"Roles, Responsibilities, and Authorities","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.SC-01","title":"Cybersecurity Supply Chain Risk Management","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.SC-02","title":"Cybersecurity Supply Chain Risk Management","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.SC-03","title":"Cybersecurity Supply Chain Risk Management","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.SC-04","title":"Cybersecurity Supply Chain Risk Management","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.SC-05","title":"Cybersecurity Supply Chain Risk Management","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.SC-06","title":"Cybersecurity Supply Chain Risk Management","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.SC-07","title":"Cybersecurity Supply Chain Risk Management","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.SC-08","title":"Cybersecurity Supply Chain Risk Management","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.SC-09","title":"Cybersecurity Supply Chain Risk Management","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"GV.SC-10","title":"Cybersecurity Supply Chain Risk Management","family":"GV","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"GV"},{"control_id":"ID.AM-01","title":"Asset Management","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.AM-02","title":"Asset Management","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.AM-03","title":"Asset Management","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.AM-04","title":"Asset Management","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.AM-05","title":"Asset Management","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.AM-07","title":"Asset Management","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.AM-08","title":"Asset Management","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.IM-01","title":"Improvement","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.IM-02","title":"Improvement","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.IM-03","title":"Improvement","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.IM-04","title":"Improvement","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.RA-01","title":"Risk Assessment","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.RA-02","title":"Risk Assessment","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.RA-03","title":"Risk Assessment","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.RA-04","title":"Risk Assessment","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.RA-05","title":"Risk Assessment","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.RA-06","title":"Risk Assessment","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.RA-07","title":"Risk Assessment","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.RA-08","title":"Risk Assessment","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.RA-09","title":"Risk Assessment","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"ID.RA-10","title":"Risk Assessment","family":"ID","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"ID"},{"control_id":"PR.AA-01","title":"Identity Management, Authentication, and Access Control","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.AA-02","title":"Identity Management, Authentication, and Access Control","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.AA-03","title":"Identity Management, Authentication, and Access Control","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.AA-04","title":"Identity Management, Authentication, and Access Control","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.AA-05","title":"Identity Management, Authentication, and Access Control","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.AA-06","title":"Identity Management, Authentication, and Access Control","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.AT-01","title":"Awareness and Training","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.AT-02","title":"Awareness and Training","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.DS-01","title":"Data Security","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.DS-02","title":"Data Security","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.DS-10","title":"Data Security","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.DS-11","title":"Data Security","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.IR-01","title":"Technology Infrastructure Resilience","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.IR-02","title":"Technology Infrastructure Resilience","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.IR-03","title":"Technology Infrastructure Resilience","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.IR-04","title":"Technology Infrastructure Resilience","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.PS-01","title":"Platform Security","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.PS-02","title":"Platform Security","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.PS-03","title":"Platform Security","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.PS-04","title":"Platform Security","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.PS-05","title":"Platform Security","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"PR.PS-06","title":"Platform Security","family":"PR","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"PR"},{"control_id":"RC.CO-03","title":"Incident Recovery Communication","family":"RC","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RC"},{"control_id":"RC.CO-04","title":"Incident Recovery Communication","family":"RC","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RC"},{"control_id":"RC.RP-01","title":"Incident Recovery Plan Execution","family":"RC","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RC"},{"control_id":"RC.RP-02","title":"Incident Recovery Plan Execution","family":"RC","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RC"},{"control_id":"RC.RP-03","title":"Incident Recovery Plan Execution","family":"RC","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RC"},{"control_id":"RC.RP-04","title":"Incident Recovery Plan Execution","family":"RC","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RC"},{"control_id":"RC.RP-05","title":"Incident Recovery Plan Execution","family":"RC","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RC"},{"control_id":"RC.RP-06","title":"Incident Recovery Plan Execution","family":"RC","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RC"},{"control_id":"RS.AN-03","title":"Incident Analysis","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"},{"control_id":"RS.AN-06","title":"Incident Analysis","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"},{"control_id":"RS.AN-07","title":"Incident Analysis","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"},{"control_id":"RS.AN-08","title":"Incident Analysis","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"},{"control_id":"RS.CO-02","title":"Incident Response Reporting and Communication","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"},{"control_id":"RS.CO-03","title":"Incident Response Reporting and Communication","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"},{"control_id":"RS.MA-01","title":"Incident Management","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"},{"control_id":"RS.MA-02","title":"Incident Management","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"},{"control_id":"RS.MA-03","title":"Incident Management","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"},{"control_id":"RS.MA-04","title":"Incident Management","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"},{"control_id":"RS.MA-05","title":"Incident Management","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"},{"control_id":"RS.MI-01","title":"Incident Mitigation","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"},{"control_id":"RS.MI-02","title":"Incident Mitigation","family":"RS","techniques":null,"technique_count":0,"detectable_count":0,"coverage_pct":0,"has_mapping":false,"is_enhancement":true,"base_control_id":"RS"}],"families":[{"family":"DE","controls":11,"controls_with_mapping":0,"distinct_techniques":0,"detectable_techniques":0,"coverage_pct":0},{"family":"GV","controls":31,"controls_with_mapping":0,"distinct_techniques":0,"detectable_techniques":0,"coverage_pct":0},{"family":"ID","controls":21,"controls_with_mapping":0,"distinct_techniques":0,"detectable_techniques":0,"coverage_pct":0},{"family":"PR","controls":22,"controls_with_mapping":0,"distinct_techniques":0,"detectable_techniques":0,"coverage_pct":0},{"family":"RC","controls":8,"controls_with_mapping":0,"distinct_techniques":0,"detectable_techniques":0,"coverage_pct":0},{"family":"RS","controls":13,"controls_with_mapping":0,"distinct_techniques":0,"detectable_techniques":0,"coverage_pct":0}],"total_controls":106,"controls_with_mapping":0,"distinct_techniques":0,"detectable_techniques":0,"overall_coverage_pct":0,"unmapped_enhancements":106,"no_mappings_at_all":true}