/control-map

Map HITRUST CSF controls to source frameworks

# HITRUST Control Mapping

Maps HITRUST CSF control requirements to underlying source frameworks (HIPAA, NIST, ISO, PCI-DSS, etc.).

## Arguments
- `$1` - HITRUST control ID (required, e.g., 01.a, 09.ab)
- `$2` - Target framework (optional: HIPAA, NIST, ISO27001, PCIDSS, all)

## HITRUST Control ID Format

**Structure**: `[Domain].[Control][Subcontrol]`
- **Domain**: 01-19 (two digits)
- **Control**: Single letter (a-z)
- **Subcontrol**: Optional second letter or number

**Examples**:
- `01.a` - Information Security Management Program, control (a)
- `09.ab` - Physical and Environmental Secu...