Files
breakpilot-compliance/admin-compliance/app/sdk/gap-analysis/_components/IstAssessment.tsx
T
Benjamin Admin 8f169cbae3 feat(gap): IST-Zustand Assessment — IACE + Normen + Prozesse
Gap Analysis v2: statt 500 generische Gaps → nur die ECHTEN Lücken.

Backend:
- ProductProfile um 15 IST-Felder erweitert (Normen, Doku, Prozesse, CE)
- assessGapStatus prüft: IACE-Mitigations → Zertifizierungen → Normen → IST-Felder
- norm_mapping.go: 20 Normen → MC-Topic Mapping (ISO 12100, IEC 62443, etc.)
- IACE-Integration: CheckIACECoverage() matcht verified Mitigations gegen MCs

Frontend:
- 2-Step Wizard: Produkt beschreiben → IST-Zustand erfassen
- IstAssessment.tsx: CE-Jahr, Normen-Multiselect, Doku+Prozess Checkboxen
- Step-Navigation mit visuellen Indikatoren

Migration 025 erweitert um IST-Felder.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-11 08:33:17 +02:00

167 lines
6.6 KiB
TypeScript

'use client'
import React from 'react'
const NORMS = [
{ value: 'ISO12100', label: 'ISO 12100 (Maschinensicherheit)' },
{ value: 'ENISO13849', label: 'EN ISO 13849 (Sicherheitsfunktionen)' },
{ value: 'IEC61508', label: 'IEC 61508 (Funktionale Sicherheit)' },
{ value: 'IEC62443', label: 'IEC 62443 (Industrielle Cybersecurity)' },
{ value: 'ISO27001', label: 'ISO 27001 (Informationssicherheit)' },
{ value: 'ISO27002', label: 'ISO 27002 (Security Controls)' },
{ value: 'EN61326', label: 'EN 61326 (EMV)' },
{ value: 'EN62368', label: 'EN 62368 (Audio/Video/IT-Sicherheit)' },
{ value: 'IEC60204', label: 'IEC 60204 (Elektrische Ausruestung)' },
{ value: 'ISO13485', label: 'ISO 13485 (Medizinprodukte QM)' },
{ value: 'ISO14971', label: 'ISO 14971 (Risikomanagement Medizin)' },
{ value: 'IEC62304', label: 'IEC 62304 (Medizin-Software Lifecycle)' },
{ value: 'ISO9001', label: 'ISO 9001 (Qualitaetsmanagement)' },
{ value: 'ISO22301', label: 'ISO 22301 (Business Continuity)' },
{ value: 'PCIDSS', label: 'PCI DSS (Zahlungssicherheit)' },
{ value: 'EN50581', label: 'EN 50581 (RoHS/REACH)' },
{ value: 'ASPICE', label: 'ASPICE (Automotive Software)' },
]
interface IstData {
applied_norms: string[]
has_risk_assessment: boolean
has_technical_file: boolean
has_operating_manual: boolean
has_sbom: boolean
has_vuln_management: boolean
has_update_mechanism: boolean
has_incident_response: boolean
has_supply_chain_mgmt: boolean
ce_marking_since: string
product_age: string
}
interface Props {
data: IstData
onChange: (data: IstData) => void
}
export function IstAssessment({ data, onChange }: Props) {
const update = (field: string, value: unknown) => {
onChange({ ...data, [field]: value })
}
const toggleNorm = (norm: string) => {
const norms = data.applied_norms.includes(norm)
? data.applied_norms.filter(n => n !== norm)
: [...data.applied_norms, norm]
update('applied_norms', norms)
}
return (
<div className="space-y-8">
<div className="bg-blue-50 border border-blue-200 rounded-lg p-4">
<p className="text-blue-800 text-sm">
Geben Sie an was Sie bereits haben. Je mehr wir wissen, desto
praeziser ist die Gap-Analyse. Controls die bereits erfuellt sind
werden automatisch als &quot;erledigt&quot; markiert.
</p>
</div>
{/* CE-Kennzeichnung */}
<div>
<h3 className="text-sm font-semibold text-gray-800 mb-3">CE-Kennzeichnung</h3>
<div className="grid grid-cols-2 gap-4">
<div>
<label className="block text-xs text-gray-500 mb-1">CE seit (Jahr)</label>
<input
type="text"
value={data.ce_marking_since}
onChange={e => update('ce_marking_since', e.target.value)}
placeholder="z.B. 2016"
className="w-full px-3 py-2 border border-gray-300 rounded-lg text-sm"
/>
</div>
<div>
<label className="block text-xs text-gray-500 mb-1">Produktalter</label>
<select
value={data.product_age}
onChange={e => update('product_age', e.target.value)}
className="w-full px-3 py-2 border border-gray-300 rounded-lg text-sm"
>
<option value="">Bitte waehlen</option>
<option value="new">Neues Produkt (noch nicht am Markt)</option>
<option value="1_year">1 Jahr</option>
<option value="3_years">2-3 Jahre</option>
<option value="5_years">4-5 Jahre</option>
<option value="10_years">6-10 Jahre</option>
<option value="10_plus">Ueber 10 Jahre</option>
</select>
</div>
</div>
</div>
{/* Angewandte Normen */}
<div>
<h3 className="text-sm font-semibold text-gray-800 mb-3">Angewandte Normen</h3>
<div className="flex flex-wrap gap-2">
{NORMS.map(n => (
<button
key={n.value}
onClick={() => toggleNorm(n.value)}
className={`px-3 py-1.5 rounded-full text-xs border transition-colors ${
data.applied_norms.includes(n.value)
? 'bg-green-100 border-green-400 text-green-800'
: 'border-gray-200 text-gray-600 hover:bg-gray-50'
}`}
>
{n.label}
</button>
))}
</div>
</div>
{/* Bestehende Dokumentation */}
<div>
<h3 className="text-sm font-semibold text-gray-800 mb-3">Bestehende Dokumentation</h3>
<div className="grid grid-cols-2 gap-3">
{[
{ field: 'has_risk_assessment', label: 'Risikobeurteilung vorhanden' },
{ field: 'has_technical_file', label: 'Technische Dokumentation vorhanden' },
{ field: 'has_operating_manual', label: 'Betriebsanleitung vorhanden' },
{ field: 'has_sbom', label: 'SBOM (Software Bill of Materials)' },
].map(item => (
<label key={item.field} className="flex items-center gap-3 cursor-pointer p-2 rounded-lg hover:bg-gray-50">
<input
type="checkbox"
checked={(data as Record<string, unknown>)[item.field] as boolean}
onChange={e => update(item.field, e.target.checked)}
className="w-4 h-4 rounded border-gray-300 text-green-600"
/>
<span className="text-sm text-gray-700">{item.label}</span>
</label>
))}
</div>
</div>
{/* Bestehende Prozesse */}
<div>
<h3 className="text-sm font-semibold text-gray-800 mb-3">Bestehende Prozesse</h3>
<div className="grid grid-cols-2 gap-3">
{[
{ field: 'has_vuln_management', label: 'Schwachstellenmanagement' },
{ field: 'has_update_mechanism', label: 'Software-Update-Mechanismus' },
{ field: 'has_incident_response', label: 'Incident Response Prozess' },
{ field: 'has_supply_chain_mgmt', label: 'Lieferketten-Management' },
].map(item => (
<label key={item.field} className="flex items-center gap-3 cursor-pointer p-2 rounded-lg hover:bg-gray-50">
<input
type="checkbox"
checked={(data as Record<string, unknown>)[item.field] as boolean}
onChange={e => update(item.field, e.target.checked)}
className="w-4 h-4 rounded border-gray-300 text-green-600"
/>
<span className="text-sm text-gray-700">{item.label}</span>
</label>
))}
</div>
</div>
</div>
)
}