Split dependencies between Defined and Automated deploy process

Author: vbakke

src/assets/YAML/default/BuildAndDeployment/Deployment.yaml

@@ -86,6 +86,7 @@ Build and Deployment:
       usefulness: 4
       dependsOn:
         - f6f7737f-25a9-4317-8de2-09bf59f29b5b # Def. Build Process
+        - 066084c6-1135-4635-9cc5-9e75c7c5459f # Version control
       implementation:
       references:
         samm2:
@@ -253,7 +254,7 @@ Build and Deployment:
         - Inventory of all production applications with application name, owner, and date of last review
         - Inventory is accessible to development, security and operations teams
       dependsOn:
-        - Defined deployment process
+        - 67e1a9aa-9fbf-4ec5-a2de-400f01960c51 # Automated deployment process
       level: 1
       difficultyOfImplementation:
         knowledge: 1
@@ -284,7 +285,7 @@ Build and Deployment:
         is deployed.
       measure: A documented inventory of artifacts in production like container images exists (gathered manually or automatically).
       dependsOn:
-        - Defined deployment process
+        - 67e1a9aa-9fbf-4ec5-a2de-400f01960c51 # Automated deployment process
         - 2a44b708-734f-4463-b0cb-86dc46344b2f # Inventory of production components
       difficultyOfImplementation:
         knowledge: 2
@@ -323,7 +324,7 @@ Build and Deployment:
         - $ref: src/assets/YAML/default/implementations.yaml#/implementations/webserver
         - $ref: src/assets/YAML/default/implementations.yaml#/implementations/rolling-update
       dependsOn:
-        - Defined deployment process
+        - 67e1a9aa-9fbf-4ec5-a2de-400f01960c51 # Automated deployment process
       references:
         samm2:
           - I-SD-A-2

src/assets/YAML/default/Implementation/DevelopmentAndSourceControl.yaml

@@ -97,8 +97,6 @@ Implementation:
         resources: 3
       usefulness: 5
       level: 1
-      dependsOn:
-        - Defined deployment process
       implementation: []
       references:
         samm2:

src/assets/YAML/default/Implementation/InfrastructureHardening.yaml

@@ -113,7 +113,7 @@ Implementation:
         - $ref: src/assets/YAML/default/implementations.yaml#/implementations/a-complete-backup-of
         - $ref: src/assets/YAML/default/implementations.yaml#/implementations/a-point-in-time-reco
       dependsOn:
-        - Defined deployment process
+        - 74938a3f-1269-49b9-9d0f-c43a79a1985a # Defined deployment process
       references:
         samm2:
           - TODO
@@ -292,7 +292,7 @@ Implementation:
       usefulness: 4
       level: 4
       dependsOn:
-        - Defined deployment process
+        - 67e1a9aa-9fbf-4ec5-a2de-400f01960c51 # Automated deployment process
         - Infrastructure as Code
       implementation: []
       references:
@@ -314,7 +314,7 @@ Implementation:
         or to modify information unauthorized on systems.
       measure:
         The usage of a (role based) access control helps to restrict system
-        access to authorized users. And enhancement is to use attribute based access control.
+        access to authorized users. And enhancement is to use *attribute based access control*.
       difficultyOfImplementation:
         knowledge: 2
         time: 3
@@ -325,7 +325,7 @@ Implementation:
         - $ref: src/assets/YAML/default/implementations.yaml#/implementations/directory-service
         - $ref: src/assets/YAML/default/implementations.yaml#/implementations/plugins
       dependsOn:
-        - Defined deployment process
+        - Defined deployment process # Does RBAC require a defined build and deployment process?
         - Defined build process
       references:
         samm2:
@@ -350,7 +350,7 @@ Implementation:
       usefulness: 5
       level: 1
       dependsOn:
-        - Defined deployment process
+        - Defined deployment process # Does simple access control require a defined deployment process?
       implementation:
         - $ref: src/assets/YAML/default/implementations.yaml#/implementations/http-basic-authentic
         - $ref: src/assets/YAML/default/implementations.yaml#/implementations/vpn
@@ -605,7 +605,7 @@ Implementation:
       usefulness: 4
       level: 2
       dependsOn:
-        - Defined deployment process
+        - 74938a3f-1269-49b9-9d0f-c43a79a1985a # Defined deployment process
       implementation: []
       references:
         samm2:

src/assets/YAML/default/TestAndVerification/ApplicationTests.yaml

@@ -100,7 +100,7 @@ Test and Verification:
       level: 4
       implementation: []
       dependsOn:
-        - Defined deployment process
+        - 67e1a9aa-9fbf-4ec5-a2de-400f01960c51 # Automated deployment process
       references:
         samm2:
           - V-RT-A-3