{
  "schema_version": "1.0",
  "generated": "2026-08-17",
  "name": "Cybatar Terminology Map",
  "preferred_entity": {
    "organisation_brand": "Cybatar",
    "product": "Cybatar Security Hub",
    "primary_category": "cybersecurity platform",
    "extended_category": "security operations and cyber assurance platform"
  },
  "terms": [
    {
      "preferred": "framework mapping",
      "avoid": [
        "framework certification",
        "NIST certified"
      ],
      "boundary": "Mapping does not establish certification or compliance."
    },
    {
      "preferred": "evidence",
      "avoid": [
        "proof when the bounded claim is not actually proved"
      ],
      "boundary": "Evidence quality, scope, freshness and contradictions matter."
    },
    {
      "preferred": "documented event-source pattern",
      "avoid": [
        "native integration unless verified",
        "certified integration unless verified"
      ],
      "boundary": "Public source patterns do not prove deployment or vendor approval."
    },
    {
      "preferred": "ATT&CK-informed",
      "avoid": [
        "MITRE certified",
        "complete ATT&CK coverage"
      ],
      "boundary": "ATT&CK use does not establish certification or complete detection coverage."
    },
    {
      "preferred": "risk decision",
      "avoid": [
        "universal risk score"
      ],
      "boundary": "Risk depends on scenario, business context, assumptions and decision authority."
    },
    {
      "preferred": "assurance evidence",
      "avoid": [
        "independent audit opinion unless independently issued"
      ],
      "boundary": "Cybatar can organise evidence without itself being an independent auditor."
    }
  ]
}