// engine/compliance-test-generator/frameworks/soc2.ts — SPEC-390: SOC2 control definitions
export const SOC2_CONTROLS = [
    {
        id: 'SOC2-CC6.1',
        framework: 'soc2',
        title: 'Logical Access Controls',
        description: 'Controls to prevent unauthorized access',
        keywords: [
            'auth',
            'login',
            'permission',
            'access control',
            'authentication',
            'authorization',
            'role',
        ],
    },
    {
        id: 'SOC2-CC6.3',
        framework: 'soc2',
        title: 'Access Removal',
        description: 'Procedures to remove access when no longer needed',
        keywords: ['revoke', 'delete user', 'deactivate', 'offboard', 'remove access'],
    },
    {
        id: 'SOC2-CC7.2',
        framework: 'soc2',
        title: 'Anomaly Detection',
        description: 'System monitors for anomalies and security events',
        keywords: ['monitor', 'alert', 'anomaly', 'detect', 'log', 'audit trail', 'notification'],
    },
    {
        id: 'SOC2-CC8.1',
        framework: 'soc2',
        title: 'Change Management',
        description: 'Authorized, tested, and documented changes',
        keywords: ['deploy', 'release', 'migration', 'rollback', 'change', 'version'],
    },
    {
        id: 'SOC2-A1.1',
        framework: 'soc2',
        title: 'Availability',
        description: 'System available for operation as committed',
        keywords: ['uptime', 'availability', 'health check', 'failover', 'sla', 'backup'],
    },
];
//# sourceMappingURL=soc2.js.map