Initial commit: breakpilot-compliance - Compliance SDK Platform
Services: Admin-Compliance, Backend-Compliance, AI-Compliance-SDK, Consent-SDK, Developer-Portal, PCA-Platform, DSMS Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
531
admin-compliance/app/(sdk)/sdk/risks/page.tsx
Normal file
531
admin-compliance/app/(sdk)/sdk/risks/page.tsx
Normal file
@@ -0,0 +1,531 @@
|
||||
'use client'
|
||||
|
||||
import React, { useState } from 'react'
|
||||
import { useSDK, Risk, RiskLikelihood, RiskImpact, RiskSeverity, calculateRiskScore, getRiskSeverityFromScore } from '@/lib/sdk'
|
||||
import { StepHeader, STEP_EXPLANATIONS } from '@/components/sdk/StepHeader'
|
||||
|
||||
// =============================================================================
|
||||
// RISK MATRIX
|
||||
// =============================================================================
|
||||
|
||||
function RiskMatrix({ risks, onCellClick }: { risks: Risk[]; onCellClick: (l: number, i: number) => void }) {
|
||||
const matrix: Record<string, Risk[]> = {}
|
||||
|
||||
risks.forEach(risk => {
|
||||
const key = `${risk.likelihood}-${risk.impact}`
|
||||
if (!matrix[key]) matrix[key] = []
|
||||
matrix[key].push(risk)
|
||||
})
|
||||
|
||||
const getCellColor = (likelihood: number, impact: number): string => {
|
||||
const score = likelihood * impact
|
||||
if (score >= 20) return 'bg-red-500'
|
||||
if (score >= 15) return 'bg-red-400'
|
||||
if (score >= 12) return 'bg-orange-400'
|
||||
if (score >= 8) return 'bg-yellow-400'
|
||||
if (score >= 4) return 'bg-yellow-300'
|
||||
return 'bg-green-400'
|
||||
}
|
||||
|
||||
return (
|
||||
<div className="bg-white rounded-xl border border-gray-200 p-6">
|
||||
<h3 className="text-lg font-semibold text-gray-900 mb-4">5x5 Risikomatrix</h3>
|
||||
<div className="flex">
|
||||
{/* Y-Axis Label */}
|
||||
<div className="flex flex-col justify-center pr-2">
|
||||
<div className="transform -rotate-90 whitespace-nowrap text-sm text-gray-500 font-medium">
|
||||
Wahrscheinlichkeit
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div className="flex-1">
|
||||
{/* Matrix Grid */}
|
||||
<div className="grid grid-cols-5 gap-1">
|
||||
{[5, 4, 3, 2, 1].map(likelihood => (
|
||||
<React.Fragment key={likelihood}>
|
||||
{[1, 2, 3, 4, 5].map(impact => {
|
||||
const key = `${likelihood}-${impact}`
|
||||
const cellRisks = matrix[key] || []
|
||||
return (
|
||||
<button
|
||||
key={key}
|
||||
onClick={() => onCellClick(likelihood, impact)}
|
||||
className={`aspect-square rounded-lg ${getCellColor(
|
||||
likelihood,
|
||||
impact
|
||||
)} hover:opacity-80 transition-opacity relative`}
|
||||
>
|
||||
{cellRisks.length > 0 && (
|
||||
<span className="absolute inset-0 flex items-center justify-center text-white font-bold text-lg">
|
||||
{cellRisks.length}
|
||||
</span>
|
||||
)}
|
||||
</button>
|
||||
)
|
||||
})}
|
||||
</React.Fragment>
|
||||
))}
|
||||
</div>
|
||||
|
||||
{/* X-Axis Label */}
|
||||
<div className="mt-2 text-center text-sm text-gray-500 font-medium">Auswirkung</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
{/* Legend */}
|
||||
<div className="mt-6 flex items-center justify-center gap-4 text-sm">
|
||||
<div className="flex items-center gap-2">
|
||||
<div className="w-4 h-4 rounded bg-green-400" />
|
||||
<span>Niedrig</span>
|
||||
</div>
|
||||
<div className="flex items-center gap-2">
|
||||
<div className="w-4 h-4 rounded bg-yellow-400" />
|
||||
<span>Mittel</span>
|
||||
</div>
|
||||
<div className="flex items-center gap-2">
|
||||
<div className="w-4 h-4 rounded bg-orange-400" />
|
||||
<span>Hoch</span>
|
||||
</div>
|
||||
<div className="flex items-center gap-2">
|
||||
<div className="w-4 h-4 rounded bg-red-500" />
|
||||
<span>Kritisch</span>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
)
|
||||
}
|
||||
|
||||
// =============================================================================
|
||||
// RISK FORM
|
||||
// =============================================================================
|
||||
|
||||
interface RiskFormData {
|
||||
title: string
|
||||
description: string
|
||||
category: string
|
||||
likelihood: RiskLikelihood
|
||||
impact: RiskImpact
|
||||
}
|
||||
|
||||
function RiskForm({
|
||||
onSubmit,
|
||||
onCancel,
|
||||
initialData,
|
||||
}: {
|
||||
onSubmit: (data: RiskFormData) => void
|
||||
onCancel: () => void
|
||||
initialData?: Partial<RiskFormData>
|
||||
}) {
|
||||
const [formData, setFormData] = useState<RiskFormData>({
|
||||
title: initialData?.title || '',
|
||||
description: initialData?.description || '',
|
||||
category: initialData?.category || 'technical',
|
||||
likelihood: initialData?.likelihood || 3,
|
||||
impact: initialData?.impact || 3,
|
||||
})
|
||||
|
||||
const score = calculateRiskScore(formData.likelihood, formData.impact)
|
||||
const severity = getRiskSeverityFromScore(score)
|
||||
|
||||
return (
|
||||
<div className="bg-white rounded-xl border border-gray-200 p-6">
|
||||
<h3 className="text-lg font-semibold text-gray-900 mb-4">
|
||||
{initialData ? 'Risiko bearbeiten' : 'Neues Risiko'}
|
||||
</h3>
|
||||
|
||||
<div className="space-y-4">
|
||||
<div>
|
||||
<label className="block text-sm font-medium text-gray-700 mb-1">Titel *</label>
|
||||
<input
|
||||
type="text"
|
||||
value={formData.title}
|
||||
onChange={e => setFormData({ ...formData, title: e.target.value })}
|
||||
placeholder="z.B. Datenverlust durch Systemausfall"
|
||||
className="w-full px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500 focus:border-transparent"
|
||||
/>
|
||||
</div>
|
||||
|
||||
<div>
|
||||
<label className="block text-sm font-medium text-gray-700 mb-1">Beschreibung</label>
|
||||
<textarea
|
||||
value={formData.description}
|
||||
onChange={e => setFormData({ ...formData, description: e.target.value })}
|
||||
placeholder="Beschreiben Sie das Risiko..."
|
||||
rows={3}
|
||||
className="w-full px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500 focus:border-transparent"
|
||||
/>
|
||||
</div>
|
||||
|
||||
<div>
|
||||
<label className="block text-sm font-medium text-gray-700 mb-1">Kategorie</label>
|
||||
<select
|
||||
value={formData.category}
|
||||
onChange={e => setFormData({ ...formData, category: e.target.value })}
|
||||
className="w-full px-4 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-purple-500 focus:border-transparent"
|
||||
>
|
||||
<option value="technical">Technisch</option>
|
||||
<option value="organizational">Organisatorisch</option>
|
||||
<option value="legal">Rechtlich</option>
|
||||
<option value="operational">Operativ</option>
|
||||
<option value="strategic">Strategisch</option>
|
||||
</select>
|
||||
</div>
|
||||
|
||||
<div className="grid grid-cols-2 gap-4">
|
||||
<div>
|
||||
<label className="block text-sm font-medium text-gray-700 mb-1">
|
||||
Wahrscheinlichkeit (1-5)
|
||||
</label>
|
||||
<input
|
||||
type="range"
|
||||
min={1}
|
||||
max={5}
|
||||
value={formData.likelihood}
|
||||
onChange={e => setFormData({ ...formData, likelihood: Number(e.target.value) as RiskLikelihood })}
|
||||
className="w-full"
|
||||
/>
|
||||
<div className="flex justify-between text-xs text-gray-500 mt-1">
|
||||
<span>Sehr unwahrscheinlich</span>
|
||||
<span className="font-bold">{formData.likelihood}</span>
|
||||
<span>Sehr wahrscheinlich</span>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div>
|
||||
<label className="block text-sm font-medium text-gray-700 mb-1">Auswirkung (1-5)</label>
|
||||
<input
|
||||
type="range"
|
||||
min={1}
|
||||
max={5}
|
||||
value={formData.impact}
|
||||
onChange={e => setFormData({ ...formData, impact: Number(e.target.value) as RiskImpact })}
|
||||
className="w-full"
|
||||
/>
|
||||
<div className="flex justify-between text-xs text-gray-500 mt-1">
|
||||
<span>Gering</span>
|
||||
<span className="font-bold">{formData.impact}</span>
|
||||
<span>Katastrophal</span>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
{/* Risk Score Preview */}
|
||||
<div
|
||||
className={`p-4 rounded-lg ${
|
||||
severity === 'CRITICAL'
|
||||
? 'bg-red-50 border border-red-200'
|
||||
: severity === 'HIGH'
|
||||
? 'bg-orange-50 border border-orange-200'
|
||||
: severity === 'MEDIUM'
|
||||
? 'bg-yellow-50 border border-yellow-200'
|
||||
: 'bg-green-50 border border-green-200'
|
||||
}`}
|
||||
>
|
||||
<div className="flex items-center justify-between">
|
||||
<span className="text-sm font-medium">Berechneter Risikoscore:</span>
|
||||
<span
|
||||
className={`px-3 py-1 rounded-full text-sm font-bold ${
|
||||
severity === 'CRITICAL'
|
||||
? 'bg-red-100 text-red-700'
|
||||
: severity === 'HIGH'
|
||||
? 'bg-orange-100 text-orange-700'
|
||||
: severity === 'MEDIUM'
|
||||
? 'bg-yellow-100 text-yellow-700'
|
||||
: 'bg-green-100 text-green-700'
|
||||
}`}
|
||||
>
|
||||
{score} ({severity})
|
||||
</span>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div className="mt-6 flex items-center justify-end gap-3">
|
||||
<button
|
||||
onClick={onCancel}
|
||||
className="px-4 py-2 text-gray-600 hover:bg-gray-100 rounded-lg transition-colors"
|
||||
>
|
||||
Abbrechen
|
||||
</button>
|
||||
<button
|
||||
onClick={() => onSubmit(formData)}
|
||||
disabled={!formData.title}
|
||||
className={`px-6 py-2 rounded-lg font-medium transition-colors ${
|
||||
formData.title
|
||||
? 'bg-purple-600 text-white hover:bg-purple-700'
|
||||
: 'bg-gray-200 text-gray-400 cursor-not-allowed'
|
||||
}`}
|
||||
>
|
||||
Speichern
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
)
|
||||
}
|
||||
|
||||
// =============================================================================
|
||||
// RISK CARD
|
||||
// =============================================================================
|
||||
|
||||
function RiskCard({
|
||||
risk,
|
||||
onEdit,
|
||||
onDelete,
|
||||
}: {
|
||||
risk: Risk
|
||||
onEdit: () => void
|
||||
onDelete: () => void
|
||||
}) {
|
||||
const severityColors = {
|
||||
CRITICAL: 'border-red-200 bg-red-50',
|
||||
HIGH: 'border-orange-200 bg-orange-50',
|
||||
MEDIUM: 'border-yellow-200 bg-yellow-50',
|
||||
LOW: 'border-green-200 bg-green-50',
|
||||
}
|
||||
|
||||
return (
|
||||
<div className={`bg-white rounded-xl border-2 p-6 ${severityColors[risk.severity]}`}>
|
||||
<div className="flex items-start justify-between">
|
||||
<div>
|
||||
<div className="flex items-center gap-2">
|
||||
<h4 className="font-semibold text-gray-900">{risk.title}</h4>
|
||||
<span
|
||||
className={`px-2 py-0.5 text-xs rounded-full ${
|
||||
risk.severity === 'CRITICAL'
|
||||
? 'bg-red-100 text-red-700'
|
||||
: risk.severity === 'HIGH'
|
||||
? 'bg-orange-100 text-orange-700'
|
||||
: risk.severity === 'MEDIUM'
|
||||
? 'bg-yellow-100 text-yellow-700'
|
||||
: 'bg-green-100 text-green-700'
|
||||
}`}
|
||||
>
|
||||
{risk.severity}
|
||||
</span>
|
||||
</div>
|
||||
<p className="text-sm text-gray-500 mt-1">{risk.description}</p>
|
||||
</div>
|
||||
<div className="flex items-center gap-2">
|
||||
<button
|
||||
onClick={onEdit}
|
||||
className="p-2 text-gray-400 hover:text-gray-600 hover:bg-gray-100 rounded-lg transition-colors"
|
||||
>
|
||||
<svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path
|
||||
strokeLinecap="round"
|
||||
strokeLinejoin="round"
|
||||
strokeWidth={2}
|
||||
d="M11 5H6a2 2 0 00-2 2v11a2 2 0 002 2h11a2 2 0 002-2v-5m-1.414-9.414a2 2 0 112.828 2.828L11.828 15H9v-2.828l8.586-8.586z"
|
||||
/>
|
||||
</svg>
|
||||
</button>
|
||||
<button
|
||||
onClick={onDelete}
|
||||
className="p-2 text-gray-400 hover:text-red-600 hover:bg-red-50 rounded-lg transition-colors"
|
||||
>
|
||||
<svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path
|
||||
strokeLinecap="round"
|
||||
strokeLinejoin="round"
|
||||
strokeWidth={2}
|
||||
d="M19 7l-.867 12.142A2 2 0 0116.138 21H7.862a2 2 0 01-1.995-1.858L5 7m5 4v6m4-6v6m1-10V4a1 1 0 00-1-1h-4a1 1 0 00-1 1v3M4 7h16"
|
||||
/>
|
||||
</svg>
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div className="mt-4 grid grid-cols-3 gap-4 text-sm">
|
||||
<div>
|
||||
<span className="text-gray-500">Wahrscheinlichkeit:</span>
|
||||
<span className="ml-2 font-medium">{risk.likelihood}/5</span>
|
||||
</div>
|
||||
<div>
|
||||
<span className="text-gray-500">Auswirkung:</span>
|
||||
<span className="ml-2 font-medium">{risk.impact}/5</span>
|
||||
</div>
|
||||
<div>
|
||||
<span className="text-gray-500">Score:</span>
|
||||
<span className="ml-2 font-medium">{risk.inherentRiskScore}</span>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
{risk.mitigation.length > 0 && (
|
||||
<div className="mt-4 pt-4 border-t border-gray-200">
|
||||
<span className="text-sm text-gray-500">Mitigationen: {risk.mitigation.length}</span>
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
)
|
||||
}
|
||||
|
||||
// =============================================================================
|
||||
// MAIN PAGE
|
||||
// =============================================================================
|
||||
|
||||
export default function RisksPage() {
|
||||
const { state, dispatch, addRisk } = useSDK()
|
||||
const [showForm, setShowForm] = useState(false)
|
||||
const [editingRisk, setEditingRisk] = useState<Risk | null>(null)
|
||||
|
||||
const handleSubmit = (data: { title: string; description: string; category: string; likelihood: RiskLikelihood; impact: RiskImpact }) => {
|
||||
const score = calculateRiskScore(data.likelihood, data.impact)
|
||||
const severity = getRiskSeverityFromScore(score)
|
||||
|
||||
if (editingRisk) {
|
||||
dispatch({
|
||||
type: 'UPDATE_RISK',
|
||||
payload: {
|
||||
id: editingRisk.id,
|
||||
data: {
|
||||
...data,
|
||||
severity,
|
||||
inherentRiskScore: score,
|
||||
residualRiskScore: score,
|
||||
},
|
||||
},
|
||||
})
|
||||
} else {
|
||||
const newRisk: Risk = {
|
||||
id: `risk-${Date.now()}`,
|
||||
...data,
|
||||
severity,
|
||||
inherentRiskScore: score,
|
||||
residualRiskScore: score,
|
||||
status: 'IDENTIFIED',
|
||||
mitigation: [],
|
||||
owner: null,
|
||||
relatedControls: [],
|
||||
relatedRequirements: [],
|
||||
}
|
||||
addRisk(newRisk)
|
||||
}
|
||||
|
||||
setShowForm(false)
|
||||
setEditingRisk(null)
|
||||
}
|
||||
|
||||
const handleDelete = (id: string) => {
|
||||
if (confirm('Möchten Sie dieses Risiko wirklich löschen?')) {
|
||||
dispatch({ type: 'DELETE_RISK', payload: id })
|
||||
}
|
||||
}
|
||||
|
||||
const handleEdit = (risk: Risk) => {
|
||||
setEditingRisk(risk)
|
||||
setShowForm(true)
|
||||
}
|
||||
|
||||
// Stats
|
||||
const totalRisks = state.risks.length
|
||||
const criticalRisks = state.risks.filter(r => r.severity === 'CRITICAL').length
|
||||
const highRisks = state.risks.filter(r => r.severity === 'HIGH').length
|
||||
const mitigatedRisks = state.risks.filter(r => r.mitigation.length > 0).length
|
||||
|
||||
const stepInfo = STEP_EXPLANATIONS['risks']
|
||||
|
||||
return (
|
||||
<div className="space-y-6">
|
||||
{/* Step Header */}
|
||||
<StepHeader
|
||||
stepId="risks"
|
||||
title={stepInfo.title}
|
||||
description={stepInfo.description}
|
||||
explanation={stepInfo.explanation}
|
||||
tips={stepInfo.tips}
|
||||
>
|
||||
{!showForm && (
|
||||
<button
|
||||
onClick={() => setShowForm(true)}
|
||||
className="flex items-center gap-2 px-4 py-2 bg-purple-600 text-white rounded-lg hover:bg-purple-700 transition-colors"
|
||||
>
|
||||
<svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M12 6v6m0 0v6m0-6h6m-6 0H6" />
|
||||
</svg>
|
||||
Risiko hinzufuegen
|
||||
</button>
|
||||
)}
|
||||
</StepHeader>
|
||||
|
||||
{/* Stats */}
|
||||
<div className="grid grid-cols-1 md:grid-cols-4 gap-4">
|
||||
<div className="bg-white rounded-xl border border-gray-200 p-6">
|
||||
<div className="text-sm text-gray-500">Gesamt</div>
|
||||
<div className="text-3xl font-bold text-gray-900">{totalRisks}</div>
|
||||
</div>
|
||||
<div className="bg-white rounded-xl border border-red-200 p-6">
|
||||
<div className="text-sm text-red-600">Kritisch</div>
|
||||
<div className="text-3xl font-bold text-red-600">{criticalRisks}</div>
|
||||
</div>
|
||||
<div className="bg-white rounded-xl border border-orange-200 p-6">
|
||||
<div className="text-sm text-orange-600">Hoch</div>
|
||||
<div className="text-3xl font-bold text-orange-600">{highRisks}</div>
|
||||
</div>
|
||||
<div className="bg-white rounded-xl border border-green-200 p-6">
|
||||
<div className="text-sm text-green-600">Mit Mitigation</div>
|
||||
<div className="text-3xl font-bold text-green-600">{mitigatedRisks}</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
{/* Form */}
|
||||
{showForm && (
|
||||
<RiskForm
|
||||
onSubmit={handleSubmit}
|
||||
onCancel={() => {
|
||||
setShowForm(false)
|
||||
setEditingRisk(null)
|
||||
}}
|
||||
initialData={editingRisk || undefined}
|
||||
/>
|
||||
)}
|
||||
|
||||
{/* Matrix */}
|
||||
<RiskMatrix risks={state.risks} onCellClick={() => {}} />
|
||||
|
||||
{/* Risk List */}
|
||||
{state.risks.length > 0 && (
|
||||
<div>
|
||||
<h3 className="text-lg font-semibold text-gray-900 mb-4">Alle Risiken</h3>
|
||||
<div className="space-y-4">
|
||||
{state.risks
|
||||
.sort((a, b) => b.inherentRiskScore - a.inherentRiskScore)
|
||||
.map(risk => (
|
||||
<RiskCard
|
||||
key={risk.id}
|
||||
risk={risk}
|
||||
onEdit={() => handleEdit(risk)}
|
||||
onDelete={() => handleDelete(risk.id)}
|
||||
/>
|
||||
))}
|
||||
</div>
|
||||
</div>
|
||||
)}
|
||||
|
||||
{/* Empty State */}
|
||||
{state.risks.length === 0 && !showForm && (
|
||||
<div className="bg-white rounded-xl border border-gray-200 p-12 text-center">
|
||||
<div className="w-16 h-16 mx-auto bg-orange-100 rounded-full flex items-center justify-center mb-4">
|
||||
<svg className="w-8 h-8 text-orange-600" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path
|
||||
strokeLinecap="round"
|
||||
strokeLinejoin="round"
|
||||
strokeWidth={2}
|
||||
d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z"
|
||||
/>
|
||||
</svg>
|
||||
</div>
|
||||
<h3 className="text-lg font-semibold text-gray-900">Keine Risiken erfasst</h3>
|
||||
<p className="mt-2 text-gray-500 max-w-md mx-auto">
|
||||
Beginnen Sie mit der Erfassung von Risiken für Ihre KI-Anwendungen.
|
||||
</p>
|
||||
<button
|
||||
onClick={() => setShowForm(true)}
|
||||
className="mt-6 px-6 py-3 bg-purple-600 text-white rounded-lg hover:bg-purple-700 transition-colors"
|
||||
>
|
||||
Erstes Risiko erfassen
|
||||
</button>
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
)
|
||||
}
|
||||
Reference in New Issue
Block a user