1b5f698f4c
Some checks failed
security-scan / secret-scan (push) Failing after 3s
Extends the existing ATLAS/OWASP/EU-AI-Act compliance module with three new control-framework mappers (NIS2 Art. 21(2), ISO/IEC 27001 Annex A, SOC 2 Trust Services Criteria), each honestly marking what ShieldX covers vs. what remains an organizational/legal gap. ComplianceRobot aggregates all four frameworks into a single prioritized, owned action plan. EUAIActAgent adds active workflows on top of the existing static reporter: Art. 6/Annex III risk pre-screening, Annex IV technical documentation scaffolding, Art. 72 post-market monitoring plan, and the corrected 2027/2028 enforcement timeline. Adds docs/flexoptix-os/ — a broader consolidation concept covering the current state (Magatama/ShieldX, EO Global Pulse), target architecture for BEO (LibreChat/Presidio-based), a Transceiver Intelligence Platform architecture recommendation, and RunWork OS externalization strategy, grounded in adversarially-verified research citations.
39 lines
1.2 KiB
TypeScript
39 lines
1.2 KiB
TypeScript
import { describe, it, expect, beforeEach } from 'vitest'
|
|
import { SOC2Mapper } from '../../../src/compliance/SOC2Mapper.js'
|
|
|
|
describe('SOC2Mapper', () => {
|
|
let mapper: SOC2Mapper
|
|
|
|
beforeEach(() => {
|
|
mapper = new SOC2Mapper()
|
|
})
|
|
|
|
describe('getCriteria()', () => {
|
|
it('should return the logical access control criterion as implemented', () => {
|
|
const criteria = mapper.getCriteria('CC6.1')
|
|
expect(criteria).toBeDefined()
|
|
expect(criteria!.implemented).toBe(true)
|
|
expect(criteria!.category).toBe('security')
|
|
})
|
|
|
|
it('should return availability as a gap', () => {
|
|
const criteria = mapper.getCriteria('A1.2')
|
|
expect(criteria).toBeDefined()
|
|
expect(criteria!.implemented).toBe(false)
|
|
expect(criteria!.category).toBe('availability')
|
|
})
|
|
|
|
it('should return undefined for unknown criteria', () => {
|
|
expect(mapper.getCriteria('ZZ9.9')).toBeUndefined()
|
|
})
|
|
})
|
|
|
|
describe('getCoverage()', () => {
|
|
it('should compute covered/total/gaps consistently', () => {
|
|
const coverage = mapper.getCoverage()
|
|
expect(coverage.covered + coverage.gaps.length).toBe(coverage.total)
|
|
expect(coverage.gaps).toContain('P1.1')
|
|
})
|
|
})
|
|
})
|