-
- ComplianceTool
-
+
ComplianceOS
diff --git a/db/migrations/001_create_users_table.sql b/db/migrations/001_create_users_table.sql
new file mode 100644
index 0000000..77a66c9
--- /dev/null
+++ b/db/migrations/001_create_users_table.sql
@@ -0,0 +1,7 @@
+CREATE TABLE IF NOT EXISTS users (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ name VARCHAR(255) NOT NULL,
+ email VARCHAR(255) NOT NULL UNIQUE,
+ password VARCHAR(255) NOT NULL,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+);
\ No newline at end of file
diff --git a/framework.php b/framework.php
new file mode 100644
index 0000000..357a584
--- /dev/null
+++ b/framework.php
@@ -0,0 +1,154 @@
+ [
+ 'name' => 'NIS2 Directive',
+ 'description' => 'An EU-wide legislation on cybersecurity. It provides legal measures to boost the overall level of cybersecurity in the EU.',
+ 'controls' => [
+ ['id' => 'C001', 'title' => 'Risk Assessment and Security Policies', 'description' => 'Conduct regular risk assessments and establish clear information security policies.'],
+ ['id' => 'C002', 'title' => 'Incident Handling', 'description' => 'Establish procedures to detect, handle, and report cybersecurity incidents.'],
+ ['id' => 'C003', 'title' => 'Business Continuity Management', 'description' => 'Develop plans for business continuity and crisis management to ensure operational resilience.'],
+ ['id' => 'C004', 'title' => 'Supply Chain Security', 'description' => 'Address security in the supply chain, including relationships with suppliers and service providers.'],
+ ['id' => 'C005', 'title' => 'Cryptography and Encryption', 'description' => 'Use of cryptography and encryption to protect data at rest and in transit.'],
+ ]
+ ],
+ 'dora' => [
+ 'name' => 'DORA',
+ 'description' => 'The Digital Operational Resilience Act is an EU regulation that creates a binding, comprehensive information and communication technology (ICT) risk management framework for the EU financial sector.',
+ 'controls' => [
+ ['id' => 'D001', 'title' => 'ICT Risk Management Framework', 'description' => 'Implement a comprehensive ICT risk management framework with clear strategies and policies.'],
+ ['id' => 'D002', 'title' => 'ICT-Related Incident Reporting', 'description' => 'Establish a process for classifying and reporting major ICT-related incidents to authorities.'],
+ ['id' => 'D003', 'title' => 'Digital Operational Resilience Testing', 'description' => 'Conduct regular resilience testing, including threat-led penetration testing (TLPT).'],
+ ['id' => 'D004', 'title' => 'Third-Party Risk Management', 'description' => 'Manage risks associated with third-party ICT service providers, including cloud services.'],
+ ]
+ ],
+ 'iso27001' => [
+ 'name' => 'ISO 27001',
+ 'description' => 'An international standard on how to manage information security. It details requirements for establishing, implementing, maintaining and continually improving an Information Security Management System (ISMS).',
+ 'controls' => [
+ ['id' => 'A.5.1', 'title' => 'Policies for information security', 'description' => 'A set of policies for information security shall be defined, approved by management, published and communicated.'],
+ ['id' => 'A.6.1', 'title' => 'Information security roles and responsibilities', 'description' => 'All information security responsibilities shall be defined and allocated.'],
+ ['id' => 'A.7.2', 'title' => 'Information security awareness, education and training', 'description' => 'All employees of the organization and, where relevant, contractors shall receive appropriate awareness education and training.'],
+ ['id' => 'A.8.1', 'title' => 'Management of assets', 'description' => 'Assets associated with information and information processing facilities shall be identified and an inventory of these assets shall be drawn up and maintained.'],
+ ['id' => 'A.12.1', 'title' => 'Protection against malware', 'description' => 'Controls for protection against malware shall be implemented and combined with user awareness.'],
+ ]
+ ]
+];
+
+// --- Logic ---
+$framework_id = $_GET['id'] ?? '';
+$framework = $frameworks[$framework_id] ?? null;
+
+// If framework not found, redirect to home
+if (!$framework) {
+ header('Location: /');
+ exit;
+}
+?>
+
+
+
+
+
+
- ComplianceOS
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
Control Requirements
+
Add New Control
+
+
+
+
+
+
+
:
+ Status: Not Assessed
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/includes/pexels.php b/includes/pexels.php
new file mode 100644
index 0000000..3190fd1
--- /dev/null
+++ b/includes/pexels.php
@@ -0,0 +1,27 @@
+ 0 ? $k : 'Vc99rnmOhHhJAbgGQoKLZtsaIVfkeownoQNbTj78VemUjKh08ZYRbf18';
+}
+function pexels_get($url) {
+ $ch = curl_init();
+ curl_setopt_array($ch, [
+ CURLOPT_URL => $url,
+ CURLOPT_RETURNTRANSFER => true,
+ CURLOPT_HTTPHEADER => [ 'Authorization: '. pexels_key() ],
+ CURLOPT_TIMEOUT => 15,
+ ]);
+ $resp = curl_exec($ch);
+ $code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+ curl_close($ch);
+ if ($code >= 200 && $code < 300 && $resp) return json_decode($resp, true);
+ return null;
+}
+function download_to($srcUrl, $destPath) {
+ $data = file_get_contents($srcUrl);
+ if ($data === false) return false;
+ if (!is_dir(dirname($destPath))) mkdir(dirname($destPath), 0775, true);
+ return file_put_contents($destPath, $data) !== false;
+}
+?>
\ No newline at end of file
diff --git a/index.php b/index.php
index 0f3bfca..0d0a44a 100644
--- a/index.php
+++ b/index.php
@@ -1,22 +1,25 @@
'nis2',
'name' => 'NIS2 Directive',
'description' => 'An EU-wide legislation on cybersecurity. It provides legal measures to boost the overall level of cybersecurity in the EU.',
- 'image' => 'https://picsum.photos/seed/nis2/400/300',
- 'alt' => 'Abstract image representing the NIS2 directive.'
+ 'image' => 'assets/images/pexels/10330117.jpg',
+ 'alt' => 'Stylized image of the EU flag representing the NIS2 directive.'
],
[
+ 'id' => 'dora',
'name' => 'DORA',
'description' => 'The Digital Operational Resilience Act is an EU regulation that creates a binding, comprehensive information and communication technology (ICT) risk management framework for the EU financial sector.',
- 'image' => 'https://picsum.photos/seed/dora/400/300',
- 'alt' => 'Abstract image representing the DORA regulation.'
+ 'image' => 'assets/images/pexels/159888.jpg',
+ 'alt' => 'Image of a modern financial district representing the DORA regulation.'
],
[
+ 'id' => 'iso27001',
'name' => 'ISO 27001',
'description' => 'An international standard on how to manage information security. It details requirements for establishing, implementing, maintaining and continually improving an Information Security Management System (ISMS).',
- 'image' => 'https://picsum.photos/seed/iso27001/400/300',
- 'alt' => 'Abstract image representing the ISO 27001 standard.'
+ 'image' => 'assets/images/pexels/3829224.jpg',
+ 'alt' => 'Image of a person working with a certified quality standard document, representing ISO 27001.'
]
];
?>
@@ -44,24 +47,33 @@ $frameworks = [