Benjamin Admin
|
824b1be6a4
|
feat: FISA 702 / Drittlandrisiko — YAML-Regeln + DSGVO Obligations
1. YAML Policy: 3 neue Regeln (Kategorie J. Drittlandrisiko)
- R-FISA-001: US-Cloud-Provider = FISA 702 Exposure (+20 Risk, DSFA empfohlen)
- R-FISA-002: PII bei US-Provider ohne E2EE (+15 Risk)
- R-FISA-003: Art. 9 Daten bei US-Provider (+25 Risk, CONDITIONAL)
- Erkennt: aws, azure, google, microsoft, amazon, openai, anthropic, oracle
2. DSGVO Obligations: 4 neue Drittland-Pflichten (OBL-081 bis OBL-084)
- Art. 44-49: Drittlanduebermittlung nur mit Garantien
- Transfer Impact Assessment (TIA) bei US-Anbietern (Schrems II)
- Zusaetzliche technische Massnahmen (EDPB Recommendations 01/2020)
- Informationspflicht bei Drittlanduebermittlung (Art. 13)
370 Obligations total (war 366)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
2026-04-15 00:39:30 +02:00 |
|
Benjamin Admin
|
38e278ee3c
|
feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / test-go-ai-compliance (push) Successful in 32s
CI / test-python-backend-compliance (push) Successful in 29s
CI / test-python-document-crawler (push) Successful in 20s
CI / test-python-dsms-gateway (push) Successful in 18s
- 9 Regulation-JSON-Dateien (DSGVO 80, AI Act 60, NIS2 40, BDSG 30, TTDSG 20, DSA 35, Data Act 25, EU-Maschinen 15, DORA 20)
- Condition-Tree-Engine fuer automatische Pflichtenselektion (all_of/any_of, 80+ Field-Paths)
- Generischer JSONRegulationModule-Loader mit YAML-Fallback
- Bidirektionales TOM-Control-Mapping (291 Obligation→Control, 92 Control→Obligation)
- Gap-Analyse-Engine (Compliance-%, Priority Actions, Domain Breakdown)
- ScopeDecision→UnifiedFacts Bridge fuer Auto-Profiling
- 4 neue API-Endpoints (assess-from-scope, tom-controls, gap-analysis, reverse-lookup)
- Frontend: Auto-Profiling Button, Regulation-Filter Chips, TOM-Panel, Gap-Analyse-View
- 18 Unit Tests (Condition Engine, v2 Loader, TOM Mapper)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
2026-03-05 14:51:44 +01:00 |
|