{
  "version": 1,
  "description": "Practical crosswalk used by Trace Lab. It is a starting point for review, not a claim of one-to-one equivalence between frameworks.",
  "mappings": {
    "TM-01": { "owasp": ["ASI01"], "nistAiRmf": ["MAP 2", "MEASURE 2", "MANAGE 2"], "mitreAtlas": ["AML.T0051", "AML.T0054"] },
    "TM-02": { "owasp": ["ASI06"], "nistAiRmf": ["MAP 3", "MEASURE 2", "MANAGE 2"], "mitreAtlas": ["AML.T0020"] },
    "TM-03": { "owasp": ["ASI02"], "nistAiRmf": ["MAP 3", "GOVERN 1", "MANAGE 2"], "mitreAtlas": ["AML.T0053"] },
    "TM-04": { "owasp": ["ASI03"], "nistAiRmf": ["GOVERN 1", "MAP 3", "MANAGE 2"], "mitreAtlas": ["AML.T0012"] },
    "TM-05": { "owasp": ["ASI02", "LLM02"], "nistAiRmf": ["MAP 2", "MEASURE 2", "MANAGE 4"], "mitreAtlas": ["AML.T0024"] },
    "TM-06": { "owasp": ["ASI05"], "nistAiRmf": ["MAP 3", "MEASURE 2", "MANAGE 2"], "mitreAtlas": ["AML.T0053"] },
    "TM-07": { "owasp": ["ASI07"], "nistAiRmf": ["GOVERN 1", "MAP 3", "MANAGE 2"], "mitreAtlas": ["AML.T0012"] },
    "TM-08": { "owasp": ["ASI04"], "nistAiRmf": ["GOVERN 6", "MAP 4", "MANAGE 3"], "mitreAtlas": ["AML.T0010"] },
    "TM-09": { "owasp": ["ASI08"], "nistAiRmf": ["MEASURE 2", "MANAGE 2", "MANAGE 4"], "mitreAtlas": ["AML.T0031"] },
    "TM-10": { "owasp": ["ASI09"], "nistAiRmf": ["GOVERN 2", "MAP 2", "MEASURE 3"], "mitreAtlas": ["AML.T0048"] }
  }
}