Skip to content

Commit 300a138

Browse files
Copilotpethers
andcommitted
docs: Fix URL consistency, add emoji to section heading, remove duplicate Features section
Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>
1 parent 54a95cf commit 300a138

1 file changed

Lines changed: 10 additions & 25 deletions

File tree

README.md

Lines changed: 10 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -479,7 +479,7 @@ Comprehensive architectural documentation with 20+ diagrams covering current imp
479479
</tr>
480480
</table>
481481

482-
## Security Architecture Documentation
482+
## 🔐 Security Architecture Documentation
483483

484484
<table>
485485
<tr>
@@ -836,26 +836,11 @@ The CIA Compliance Manager isn't just another compliance tool—it's a platform
836836
This project serves as a **reference implementation** of security best practices:
837837
- See how [SLSA Level 3](https://github.com/Hack23/cia-compliance-manager/attestations) is achieved in practice
838838
- Understand [80%+ test coverage](https://hack23.github.io/cia-compliance-manager/docs/coverage) implementation
839-
- Review our [threat modeling](./docs/architecture/THREAT_MODEL.md) approach
840-
- Explore [supply chain security](./ISMS_IMPLEMENTATION_GUIDE.md) controls
839+
- Review our [threat modeling](https://github.com/Hack23/cia-compliance-manager/blob/main/docs/architecture/THREAT_MODEL.md) approach
840+
- Explore [supply chain security](https://github.com/Hack23/cia-compliance-manager/blob/main/ISMS_IMPLEMENTATION_GUIDE.md) controls
841841

842842
---
843843

844-
## Features
845-
846-
The CIA Compliance Manager provides enterprise-grade capabilities for comprehensive security management:
847-
848-
- **🔍 Dynamic Security Assessment**: Configure and assess security requirements across the CIA triad with real-time control effectiveness tracking per [Classification Framework](https://github.com/Hack23/ISMS-PUBLIC/blob/main/CLASSIFICATION.md)
849-
- **💰 Cost Estimation Tools**: Calculate both CAPEX and OPEX based on selected security levels with detailed breakdown and multi-year roadmap planning
850-
- **📊 Business Impact Analysis**: Evaluate potential impacts using our [Business Impact Analysis Matrix](https://github.com/Hack23/ISMS-PUBLIC/blob/main/CLASSIFICATION.md#business-impact-analysis-matrix) across financial, operational, reputational, and regulatory dimensions
851-
- **🛠️ Technical Implementation Guidance**: Detailed implementation recommendations for each security level with technology suggestions and best practices
852-
- **📋 Compliance Mapping**: Map controls to NIST 800-53, ISO 27001, GDPR, HIPAA, SOC2, PCI DSS, and CRA frameworks with automated gap analysis
853-
- **🎯 Customizable Security Levels**: Tailor security controls to your organization's specific needs and risk profile based on classification requirements
854-
- **📝 Reporting and Documentation**: Generate comprehensive reports for stakeholders at technical and executive levels with automated evidence collection
855-
- **💵 ROI Calculator**: Measure return on investment for security implementations against potential breach costs and business impact
856-
- **🎭 Threat Modeling Integration**: STRIDE analysis with attack tree visualization for comprehensive risk assessment
857-
- **🏷️ Data Classification Framework**: Apply systematic classification based on confidentiality, integrity, and availability requirements
858-
859844
## 🏢 Business Overview
860845

861846
The CIA Compliance Manager is a comprehensive solution designed to help organizations manage and maintain compliance with various security frameworks and standards. The system focuses on the three core principles of information security:
@@ -1052,8 +1037,8 @@ Complete system design with 20+ architectural diagrams including C4 models, secu
10521037
| Document | Description | Links |
10531038
|----------|-------------|-------|
10541039
| **C4 Architecture Models** | System context, containers, components, and deployment views | [Current](https://github.com/Hack23/cia-compliance-manager/blob/main/docs/architecture/ARCHITECTURE.md)[Future](https://github.com/Hack23/cia-compliance-manager/blob/main/docs/architecture/FUTURE_ARCHITECTURE.md) |
1055-
| **Security Architecture** | STRIDE threat analysis, attack trees, security patterns | [Current](./docs/architecture/SECURITY_ARCHITECTURE.md)[Future](./docs/architecture/FUTURE_SECURITY_ARCHITECTURE.md) |
1056-
| **Threat Model** | Comprehensive threat analysis with STRIDE methodology | [View Threat Model](./docs/architecture/THREAT_MODEL.md) |
1040+
| **Security Architecture** | STRIDE threat analysis, attack trees, security patterns | [Current](https://github.com/Hack23/cia-compliance-manager/blob/main/docs/architecture/SECURITY_ARCHITECTURE.md)[Future](https://github.com/Hack23/cia-compliance-manager/blob/main/docs/architecture/FUTURE_SECURITY_ARCHITECTURE.md) |
1041+
| **Threat Model** | Comprehensive threat analysis with STRIDE methodology | [View Threat Model](https://github.com/Hack23/cia-compliance-manager/blob/main/docs/architecture/THREAT_MODEL.md) |
10571042
| **Data Models** | Entity relationships, data flows, classification | [Current](https://github.com/Hack23/cia-compliance-manager/blob/main/docs/architecture/DATA_MODEL.md)[Future](https://github.com/Hack23/cia-compliance-manager/blob/main/docs/architecture/FUTURE_DATA_MODEL.md) |
10581043
| **State Diagrams** | System state transitions and workflows | [Current](https://github.com/Hack23/cia-compliance-manager/blob/main/docs/architecture/STATEDIAGRAM.md)[Future](https://github.com/Hack23/cia-compliance-manager/blob/main/docs/architecture/FUTURE_STATEDIAGRAM.md) |
10591044
| **Process Flowcharts** | Assessment workflows and compliance processes | [Current](https://github.com/Hack23/cia-compliance-manager/blob/main/docs/architecture/FLOWCHART.md)[Future](https://github.com/Hack23/cia-compliance-manager/blob/main/docs/architecture/FUTURE_FLOWCHART.md) |
@@ -1068,11 +1053,11 @@ Security implementation details, compliance mappings, and ISMS integration align
10681053

10691054
| Document | Description | Link |
10701055
|----------|-------------|------|
1071-
| **Control Mapping** | Framework-to-ISMS-policy mappings (NIST, ISO, CIS) | [View Mapping](./control-mapping.md) |
1072-
| **ISMS Implementation** | Detailed security control implementation (790 lines) | [View Guide](./ISMS_IMPLEMENTATION_GUIDE.md) |
1073-
| **Traceability Matrix** | End-to-end control-to-evidence mapping (100+ controls) | [View Matrix](./TRACEABILITY_MATRIX.md) |
1074-
| **CRA Assessment** | EU Cyber Resilience Act compliance documentation | [View Assessment](./CRA-ASSESSMENT.md) |
1075-
| **Security Policy** | Vulnerability disclosure and security contacts | [View Policy](./SECURITY.md) |
1056+
| **Control Mapping** | Framework-to-ISMS-policy mappings (NIST, ISO, CIS) | [View Mapping](https://github.com/Hack23/cia-compliance-manager/blob/main/control-mapping.md) |
1057+
| **ISMS Implementation** | Detailed security control implementation (790 lines) | [View Guide](https://github.com/Hack23/cia-compliance-manager/blob/main/ISMS_IMPLEMENTATION_GUIDE.md) |
1058+
| **Traceability Matrix** | End-to-end control-to-evidence mapping (100+ controls) | [View Matrix](https://github.com/Hack23/cia-compliance-manager/blob/main/TRACEABILITY_MATRIX.md) |
1059+
| **CRA Assessment** | EU Cyber Resilience Act compliance documentation | [View Assessment](https://github.com/Hack23/cia-compliance-manager/blob/main/CRA-ASSESSMENT.md) |
1060+
| **Security Policy** | Vulnerability disclosure and security contacts | [View Policy](https://github.com/Hack23/cia-compliance-manager/blob/main/SECURITY.md) |
10761061

10771062
### 🧪 **Testing & Quality Documentation**
10781063

0 commit comments

Comments
 (0)