150 lines
3.3 KiB
JSON
150 lines
3.3 KiB
JSON
|
[
|
|||
|
|
{
|
|||
|
|
"id": "ev-001",
|
|||
|
|
"title": "Politique de sécurité de l’information v1.4",
|
|||
|
|
"pillar": "security",
|
|||
|
|
"auditorReady": true,
|
|||
|
|
"visibility": "auditor",
|
|||
|
|
"linkedMilestones": [
|
|||
|
|
"sec-governance"
|
|||
|
|
],
|
|||
|
|
"updatedAt": "2026-04-09"
|
|||
|
|
},
|
|||
|
|
{
|
|||
|
|
"id": "ev-002",
|
|||
|
|
"title": "Export Keycloak – MFA et rôles administrateurs",
|
|||
|
|
"pillar": "security",
|
|||
|
|
"auditorReady": false,
|
|||
|
|
"visibility": "internal",
|
|||
|
|
"linkedMilestones": [
|
|||
|
|
"sec-iam",
|
|||
|
|
"con-access"
|
|||
|
|
],
|
|||
|
|
"updatedAt": "2026-03-29"
|
|||
|
|
},
|
|||
|
|
{
|
|||
|
|
"id": "ev-003",
|
|||
|
|
"title": "Journal des changements Forgejo / Pull Requests",
|
|||
|
|
"pillar": "security",
|
|||
|
|
"auditorReady": true,
|
|||
|
|
"visibility": "auditor",
|
|||
|
|
"linkedMilestones": [
|
|||
|
|
"sec-change",
|
|||
|
|
"pi-inputs"
|
|||
|
|
],
|
|||
|
|
"updatedAt": "2026-04-15"
|
|||
|
|
},
|
|||
|
|
{
|
|||
|
|
"id": "ev-004",
|
|||
|
|
"title": "Rapport Icinga – disponibilité des services",
|
|||
|
|
"pillar": "availability",
|
|||
|
|
"auditorReady": true,
|
|||
|
|
"visibility": "auditor",
|
|||
|
|
"linkedMilestones": [
|
|||
|
|
"ava-monitoring",
|
|||
|
|
"ava-incidents",
|
|||
|
|
"sec-logging"
|
|||
|
|
],
|
|||
|
|
"updatedAt": "2026-04-16"
|
|||
|
|
},
|
|||
|
|
{
|
|||
|
|
"id": "ev-005",
|
|||
|
|
"title": "Procédure de sauvegarde et test de restauration",
|
|||
|
|
"pillar": "availability",
|
|||
|
|
"auditorReady": true,
|
|||
|
|
"visibility": "auditor",
|
|||
|
|
"linkedMilestones": [
|
|||
|
|
"ava-backup",
|
|||
|
|
"ava-resilience"
|
|||
|
|
],
|
|||
|
|
"updatedAt": "2026-04-12"
|
|||
|
|
},
|
|||
|
|
{
|
|||
|
|
"id": "ev-006",
|
|||
|
|
"title": "Cartographie des flux critiques de traitement",
|
|||
|
|
"pillar": "processing-integrity",
|
|||
|
|
"auditorReady": false,
|
|||
|
|
"visibility": "internal",
|
|||
|
|
"linkedMilestones": [
|
|||
|
|
"pi-flows",
|
|||
|
|
"pi-audit"
|
|||
|
|
],
|
|||
|
|
"updatedAt": "2026-04-04"
|
|||
|
|
},
|
|||
|
|
{
|
|||
|
|
"id": "ev-007",
|
|||
|
|
"title": "Registre de classification des données",
|
|||
|
|
"pillar": "confidentiality",
|
|||
|
|
"auditorReady": false,
|
|||
|
|
"visibility": "internal",
|
|||
|
|
"linkedMilestones": [
|
|||
|
|
"con-classification",
|
|||
|
|
"con-lifecycle"
|
|||
|
|
],
|
|||
|
|
"updatedAt": "2026-03-18"
|
|||
|
|
},
|
|||
|
|
{
|
|||
|
|
"id": "ev-008",
|
|||
|
|
"title": "Registre des renseignements personnels",
|
|||
|
|
"pillar": "privacy",
|
|||
|
|
"auditorReady": false,
|
|||
|
|
"visibility": "internal",
|
|||
|
|
"linkedMilestones": [
|
|||
|
|
"pri-mapping",
|
|||
|
|
"pri-rules",
|
|||
|
|
"pri-retention"
|
|||
|
|
],
|
|||
|
|
"updatedAt": "2026-04-02"
|
|||
|
|
},
|
|||
|
|
{
|
|||
|
|
"id": "ev-009",
|
|||
|
|
"title": "Journal des incidents et post-mortems",
|
|||
|
|
"pillar": "security",
|
|||
|
|
"auditorReady": true,
|
|||
|
|
"visibility": "auditor",
|
|||
|
|
"linkedMilestones": [
|
|||
|
|
"sec-ir",
|
|||
|
|
"ava-incidents"
|
|||
|
|
],
|
|||
|
|
"updatedAt": "2026-04-10"
|
|||
|
|
},
|
|||
|
|
{
|
|||
|
|
"id": "ev-010",
|
|||
|
|
"title": "Registre des fournisseurs critiques",
|
|||
|
|
"pillar": "confidentiality",
|
|||
|
|
"auditorReady": false,
|
|||
|
|
"visibility": "internal",
|
|||
|
|
"linkedMilestones": [
|
|||
|
|
"con-thirdparty",
|
|||
|
|
"pri-incidents"
|
|||
|
|
],
|
|||
|
|
"updatedAt": "2026-03-27"
|
|||
|
|
},
|
|||
|
|
{
|
|||
|
|
"id": "ev-011",
|
|||
|
|
"title": "Inventaire des services in-scope",
|
|||
|
|
"pillar": "availability",
|
|||
|
|
"auditorReady": true,
|
|||
|
|
"visibility": "auditor",
|
|||
|
|
"linkedMilestones": [
|
|||
|
|
"ava-inventory",
|
|||
|
|
"sec-governance"
|
|||
|
|
],
|
|||
|
|
"updatedAt": "2026-04-11"
|
|||
|
|
},
|
|||
|
|
{
|
|||
|
|
"id": "ev-012",
|
|||
|
|
"title": "Matrice contrôles ↔ preuves",
|
|||
|
|
"pillar": "security",
|
|||
|
|
"auditorReady": true,
|
|||
|
|
"visibility": "auditor",
|
|||
|
|
"linkedMilestones": [
|
|||
|
|
"sec-governance",
|
|||
|
|
"sec-change",
|
|||
|
|
"con-review",
|
|||
|
|
"pri-review",
|
|||
|
|
"pi-audit"
|
|||
|
|
],
|
|||
|
|
"updatedAt": "2026-04-16"
|
|||
|
|
}
|
|||
|
|
]
|