Compliance self-assessment
This matrix is a self-assessment reference, not a certification or auditor opinion.
| Pillar | iso27001 | nis2 | cra | gdpr |
|---|---|---|---|---|
| Asset & data inventory | yellow | yellow | yellow | yellow |
| Access control | red | red | n/a | red |
| Cryptography | red | n/a | n/a | red |
| Logging & monitoring | green | n/a | n/a | green |
| Vulnerability management | red | n/a | red | n/a |
| Secure development | green | n/a | green | green |
| Supply chain / SBOM | red | red | red | red |
| Incident response | green | green | green | green |
| Backup & continuity | red | n/a | n/a | n/a |
| Privacy & data-subject rights | n/a | n/a | n/a | red |
| Cardholder data environment | n/a | n/a | n/a | n/a |
| Policies & governance docs | green | n/a | n/a | green |
| Awareness / training | red | n/a | n/a | n/a |
Evidence
- iso27001 / Asset & data inventory partial:
tests/test_architecture.py - nis2 / Asset & data inventory partial:
tests/test_architecture.py - cra / Asset & data inventory partial:
tests/test_architecture.py - gdpr / Asset & data inventory partial:
tests/test_architecture.py - iso27001 / Logging & monitoring pass:
docuharnessx/ontology/schema.py,tests/ontology/test_errors.py,tests/ontology/test_hardening.py,tests/ontology/test_model.py,tests/ontology/test_normalize_prefix.py,tests/ontology/test_package_import.py - gdpr / Logging & monitoring pass:
docuharnessx/ontology/schema.py,tests/ontology/test_errors.py,tests/ontology/test_hardening.py,tests/ontology/test_model.py,tests/ontology/test_normalize_prefix.py,tests/ontology/test_package_import.py - iso27001 / Secure development pass:
.github/workflows/adopt.yml,.github/workflows/dhx.yml,.github/workflows/docs.yml,tests/fixtures/agentic_repo/README.md,tests,tests/ontology/test_errors.py - cra / Secure development pass:
.github/workflows/adopt.yml,.github/workflows/dhx.yml,.github/workflows/docs.yml,tests/fixtures/agentic_repo/README.md,tests,tests/ontology/test_errors.py - gdpr / Secure development pass:
.github/workflows/adopt.yml,.github/workflows/dhx.yml,.github/workflows/docs.yml,tests/fixtures/agentic_repo/README.md,tests,tests/ontology/test_errors.py - iso27001 / Incident response pass:
.kiro/settings/templates/steering-custom/security.md - nis2 / Incident response pass:
.kiro/settings/templates/steering-custom/security.md - cra / Incident response pass:
.kiro/settings/templates/steering-custom/security.md - gdpr / Incident response pass:
.kiro/settings/templates/steering-custom/security.md - iso27001 / Policies & governance docs pass:
.kiro/settings/templates/steering-custom/security.md,tests/test_ci_policy.py - gdpr / Policies & governance docs pass:
.kiro/settings/templates/steering-custom/security.md,tests/test_ci_policy.py