Skip to content

Commit 4cce6d6

Browse files
wurstbrotwurstbrot
authored
Merge pull request #222 from jonashirner/master
Fixed yaml issues; added missing ISO27k1 mappings; fixed sort by ISO27k1:2022
2 parents a859651 + 631ce61 commit 4cce6d6

8 files changed

Lines changed: 69 additions & 53 deletions

File tree

‎src/app/component/mapping/mapping.component.ts‎

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -471,12 +471,16 @@ export class MappingComponent implements OnInit {
471471
}
472472
}
473473
for (var i = 0; i < ISO22Array.length; i++) {
474-
this.temporaryMappingElement['ISO22'] = ISO22Array[i];
475-
this.allMappingDataSortedByISO22.push(this.temporaryMappingElement);
474+
const newTempElement = JSON.parse(
475+
JSON.stringify(this.temporaryMappingElement)
476+
);
477+
newTempElement['ISO22'] = ISO22Array[i];
478+
//console.log(newTempElement);
479+
this.allMappingDataSortedByISO22.push(newTempElement);
476480
if (this.YamlObject[dim][subDim][task]['isImplemented']) {
477-
this.performedMappingDataSortedByISO22.push(this.temporaryMappingElement);
481+
this.performedMappingDataSortedByISO22.push(newTempElement);
478482
} else {
479-
this.plannedMappingDataSortedByISO22.push(this.temporaryMappingElement);
483+
this.plannedMappingDataSortedByISO22.push(newTempElement);
480484
}
481485
}
482486
//sorting by descending order

‎src/assets/YAML/default/CultureAndOrganization/Design.yaml‎

Lines changed: 28 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -39,13 +39,13 @@ Culture and Organization:
3939
samm2:
4040
- D-TA-2-B
4141
iso27001-2017:
42-
- not explicitly covered by ISO 27001
43-
- may be part of risk assessment
42+
- Not explicitly covered by ISO 27001
43+
- May be part of risk assessment
4444
- 8.2.1
4545
- 14.2.1
4646
iso27001-2022:
47-
- not explicitly covered by ISO 27001
48-
- may be part of risk assessment
47+
- Not explicitly covered by ISO 27001
48+
- May be part of risk assessment
4949
- 5.12
5050
- 8.25
5151
isImplemented: false
@@ -67,13 +67,13 @@ Culture and Organization:
6767
samm2:
6868
- D-TA-2-B
6969
iso27001-2017:
70-
- not explicitly covered by ISO 27001
71-
- may be part of risk assessment
70+
- Not explicitly covered by ISO 27001
71+
- May be part of risk assessment
7272
- 8.2.1
7373
- 14.2.1
7474
iso27001-2022:
75-
- not explicitly covered by ISO 27001
76-
- may be part of risk assessment
75+
- Not explicitly covered by ISO 27001
76+
- May be part of risk assessment
7777
- 5.12
7878
- 8.25
7979
isImplemented: false
@@ -144,13 +144,13 @@ Culture and Organization:
144144
samm2:
145145
- D-TA-2-B
146146
iso27001-2017:
147-
- not explicitly covered by ISO 27001
148-
- may be part of risk assessment
147+
- Not explicitly covered by ISO 27001
148+
- May be part of risk assessment
149149
- 8.2.1
150150
- 14.2.1
151151
iso27001-2022:
152-
- not explicitly covered by ISO 27001
153-
- may be part of risk assessment
152+
- Not explicitly covered by ISO 27001
153+
- May be part of risk assessment
154154
- 5.12
155155
- 8.25
156156
isImplemented: false
@@ -175,16 +175,16 @@ Culture and Organization:
175175
samm2:
176176
- D-TA-2-B
177177
iso27001-2017:
178-
- not explicitly covered by ISO 27001
179-
- may be part of project management
178+
- Not explicitly covered by ISO 27001
179+
- May be part of project management
180180
- 6.1.5
181-
- may be part of risk assessment
181+
- May be part of risk assessment
182182
- 8.1.2
183183
iso27001-2022:
184-
- not explicitly covered by ISO 27001
185-
- may be part of project management
184+
- Not explicitly covered by ISO 27001
185+
- May be part of project management
186186
- 5.8
187-
- may be part of risk assessment
187+
- May be part of risk assessment
188188
- 5.9
189189
isImplemented: false
190190
evidence: ""
@@ -208,16 +208,16 @@ Culture and Organization:
208208
samm2:
209209
- D-TA-2-B
210210
iso27001-2017:
211-
- not explicitly covered by ISO 27001
212-
- may be part of project management
211+
- Not explicitly covered by ISO 27001
212+
- May be part of project management
213213
- 6.1.5
214-
- may be part of risk assessment
214+
- May be part of risk assessment
215215
- 8.1.2
216216
iso27001-2022:
217-
- not explicitly covered by ISO 27001
218-
- may be part of project management
217+
- Not explicitly covered by ISO 27001
218+
- May be part of project management
219219
- 5.8
220-
- may be part of risk assessment
220+
- May be part of risk assessment
221221
- 5.9
222222
isImplemented: false
223223
evidence: ""
@@ -243,13 +243,13 @@ Culture and Organization:
243243
samm2:
244244
- D-TA-3-B
245245
iso27001-2017:
246-
- not explicitly covered by ISO 27001
247-
- may be part of risk assessment
246+
- Not explicitly covered by ISO 27001
247+
- May be part of risk assessment
248248
- 8.2.1
249249
- 14.2.1
250250
iso27001-2022:
251-
- not explicitly covered by ISO 27001
252-
- may be part of risk assessment
251+
- Not explicitly covered by ISO 27001
252+
- May be part of risk assessment
253253
- 5.12
254254
- 8.25
255255
isImplemented: false

‎src/assets/YAML/default/CultureAndOrganization/EducationAndGuidance.yaml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,8 @@ Culture and Organization:
4242
- G-EG-3-B
4343
iso27001-2017:
4444
- 7.1.1
45+
iso27001-2022:
46+
- 6.1
4547
isImplemented: false
4648
evidence: ""
4749
comments: ""

‎src/assets/YAML/default/Implementation/ApplicationHardening.yaml‎

Lines changed: 15 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -11,11 +11,6 @@ Implementation:
1111
1212
in all applications provides a good baseline. Implement 50% of the recommendations.
1313
difficultyOfImplementation:
14-
knowledge: 4
15-
time: 4
16-
resources: 2
17-
usefulness: 4
18-
level: 3
1914
knowledge: 2
2015
time: 2
2116
resources: 1
@@ -127,8 +122,11 @@ Implementation:
127122
samm2:
128123
- D-SR-2-A
129124
iso27001-2017:
130-
- hardening is not explicitly covered by ISO 27001 - too specific
131-
- 13.1.3
125+
- Hardening is not explicitly covered by ISO 27001 - too specific
126+
- 13.1.3
127+
iso27001-2022:
128+
- Hardening is not explicitly covered by ISO 27001 - too specific
129+
- 8.22
132130
isImplemented: false
133131
evidence: ""
134132
comments: ""
@@ -156,8 +154,11 @@ Implementation:
156154
samm2:
157155
- D-SR-2-A
158156
iso27001-2017:
159-
- hardening is not explicitly covered by ISO 27001 - too specific
160-
- 13.1.3
157+
- Hardening is not explicitly covered by ISO 27001 - too specific
158+
- 13.1.3
159+
iso27001-2022:
160+
- Hardening is not explicitly covered by ISO 27001 - too specific
161+
- 8.22
161162
isImplemented: false
162163
evidence: ""
163164
comments: ""
@@ -212,8 +213,11 @@ Implementation:
212213
samm2:
213214
- D-SR-3-A
214215
iso27001-2017:
215-
- hardening is not explicitly covered by ISO 27001 - too specific
216-
- 13.1.3
216+
- Hardening is not explicitly covered by ISO 27001 - too specific
217+
- 13.1.3
218+
iso27001-2022:
219+
- Hardening is not explicitly covered by ISO 27001 - too specific
220+
- 8.22
217221
isImplemented: false
218222
evidence: ""
219223
comments: ""

‎src/assets/YAML/default/Implementation/InfrastructureHardening.yaml‎

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ Implementation:
2424
- 9.2.4
2525
- 6.1.2 # Segregation of duties.
2626
- 14.2.1 # Secure development policies.
27-
iso27001-2022:
27+
iso27001-2022:
2828
- 5.17 # Authentication information
2929
- 5.3
3030
- 8.25
@@ -58,7 +58,7 @@ Implementation:
5858
- 9.2.4
5959
- 6.1.2 # Segregation of duties.
6060
- 14.2.1 # Secure development policies.
61-
iso27001-2022:
61+
iso27001-2022:
6262
- 5.17 # Authentication information
6363
- 5.3
6464
- 8.25
@@ -414,8 +414,11 @@ Implementation:
414414
samm2:
415415
- O-EM-1-A
416416
iso27001-2017:
417-
- system hardening is not explicitly covered by ISO 27001 - too specific
418-
- 13.1.3
417+
- Hardening is not explicitly covered by ISO 27001 - too specific
418+
- 13.1.3
419+
iso27001-2022:
420+
- Hardening is not explicitly covered by ISO 27001 - too specific
421+
- 8.22
419422
isImplemented: false
420423
evidence: ""
421424
comments: ""

‎src/assets/YAML/default/InformationGathering/Monitoring.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -64,11 +64,11 @@ Information Gathering:
6464
- $ref: src/assets/YAML/default/implementations.yaml#/implementations/falco
6565
references:
6666
samm2:
67-
- O-IM-2-A
67+
- O-IM-2-A
6868
iso27001-2017:
69-
- 12.6.1
69+
- 12.6.1
7070
iso27001-2022:
71-
- 8.8
71+
- 8.8
7272
isImplemented: false
7373
evidence: ""
7474
comments: ""

‎src/assets/YAML/default/TestAndVerification/Consolidation.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,7 @@ Test and Verification:
8181
iso27001-2017:
8282
- 16.1.4
8383
iso27001-2022:
84-
- I5.25
84+
- 5.25
8585
isImplemented: false
8686
evidence: ""
8787
comments: ""

‎src/assets/YAML/default/TestAndVerification/DynamicDepthForInfrastructure.yaml‎

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -77,8 +77,11 @@ Test and Verification:
7777
references:
7878
samm2: []
7979
iso27001-2017:
80-
- 12.5.1
81-
- 12.6.1
80+
- 12.5.1
81+
- 12.6.1
82+
iso27001-2022:
83+
- 8.19
84+
- 8.8
8285
isImplemented: false
8386
evidence: ""
8487
comments: ""

0 commit comments

Comments
 (0)