Coverage mapping method 2026-10-06.3.
The map reviews supplied test results. It does not execute security tests, assess attack coverage or authenticate a reported pass. A supported mapping is a recorded evidence relationship, not proof of security.
PDF and DOCX summarize the first 100 requirements, mapping assessments and source issues, with cells abridged after 400 characters. Excel and JSON preserve complete datasets, results and issues. CSV preserves all requirements.
The JSON contains parsed source datasets. It is not an exact-byte file backup. Use Download browser backup in the tool to retain original source file bytes.
Review every missing mapping, unsupported source, partial scope, incomplete activity, stale evidence and adverse outcome. A recorded mapping does not establish effectiveness or compliance.
