Community-verify one CWE to SOC 2 or ISO 27001 mapping

[Synvoya]

Goal

Independently verify one existing CWE mapping to either SOC 2 or ISO/IEC 27001 and move it from maintainer-policy-reviewed to community-verified.

This is evidence work, not a request to claim certification or compliance.

Acceptance criteria

• Choose one mapping currently documented in docs/COMPLIANCE-RATIONALE.md.
• Cite an authoritative control source that contributors can legally reference.
• Explain the relationship between the finding and the control objective, including any limitation or indirectness.
• Preserve the standing disclaimer: CodeInspectus provides code-visible evidence only and does not establish organizational compliance.
• Update the mapping state and aggregate verification count consistently.
• Use the compliance-mapping PR template.
• Do not change detection behavior in this contribution.

[bharat7-cyber]

Hi @Synvoya! I'd like to work on this issue if it's available.

[Synvoya]

Welcome @bharat7-cyber, and thank you for contributing! I’ve assigned this issue to you. Please choose one existing mapping from docs/COMPLIANCE-RATIONALE.md and comment here with your selection before starting so we can confirm the scope.