5. Compliance

Use this section to check what catalogs Evidentia bundles, what its own conformance evidence supports, and how crosswalks and catalog imports work.

Pages in this section

• Catalog inventory: framework families, redistribution tiers and the text actually bundled.
• Catalog currency: dated source checks, historical catalogs, ID changes and applicability limits.
• Framework conformance: Evidentia's own standards claims and supporting evidence.
• Crosswalk index: bundled mappings and their source and target families.
• OSPS Baseline mapping: the upstream assessment requirements, bundled mappings and GitHub collector checks.
• OCSF mapping: the normative SecurityFinding field map, ingestion and detection behavior.
• Gemara mapping: Evidentia's alignment with the OpenSSF Gemara taxonomy.
• Financial-sector overlay: catalog composition for banks, broker-dealers, insurers and credit unions.
• Contributing a catalog: the catalog schema, redistribution rules and required validation.

Keeping these pages current

The catalog inventory, framework conformance and crosswalk index are maintained against the repository's data and evidence. The catalog inventory includes a generated count table. OCSF, Gemara, financial-sector overlay, catalog currency and catalog contribution pages are generated mirrors of their canonical docs/ sources. scripts/wiki/sync_mirrors.py refreshes those mirrors, and the wiki synchronization workflow publishes them after the required checks pass.