150 lines
No EOL
3.3 KiB
JSON
150 lines
No EOL
3.3 KiB
JSON
[
|
||
{
|
||
"id": "ev-001",
|
||
"title": "Politique de sécurité de l’information v1.4",
|
||
"pillar": "security",
|
||
"auditorReady": true,
|
||
"visibility": "auditor",
|
||
"linkedMilestones": [
|
||
"sec-governance"
|
||
],
|
||
"updatedAt": "2026-04-09"
|
||
},
|
||
{
|
||
"id": "ev-002",
|
||
"title": "Export Keycloak – MFA et rôles administrateurs",
|
||
"pillar": "security",
|
||
"auditorReady": false,
|
||
"visibility": "internal",
|
||
"linkedMilestones": [
|
||
"sec-iam",
|
||
"con-access"
|
||
],
|
||
"updatedAt": "2026-03-29"
|
||
},
|
||
{
|
||
"id": "ev-003",
|
||
"title": "Journal des changements Forgejo / Pull Requests",
|
||
"pillar": "security",
|
||
"auditorReady": true,
|
||
"visibility": "auditor",
|
||
"linkedMilestones": [
|
||
"sec-change",
|
||
"pi-inputs"
|
||
],
|
||
"updatedAt": "2026-04-15"
|
||
},
|
||
{
|
||
"id": "ev-004",
|
||
"title": "Rapport Icinga – disponibilité des services",
|
||
"pillar": "availability",
|
||
"auditorReady": true,
|
||
"visibility": "auditor",
|
||
"linkedMilestones": [
|
||
"ava-monitoring",
|
||
"ava-incidents",
|
||
"sec-logging"
|
||
],
|
||
"updatedAt": "2026-04-16"
|
||
},
|
||
{
|
||
"id": "ev-005",
|
||
"title": "Procédure de sauvegarde et test de restauration",
|
||
"pillar": "availability",
|
||
"auditorReady": true,
|
||
"visibility": "auditor",
|
||
"linkedMilestones": [
|
||
"ava-backup",
|
||
"ava-resilience"
|
||
],
|
||
"updatedAt": "2026-04-12"
|
||
},
|
||
{
|
||
"id": "ev-006",
|
||
"title": "Cartographie des flux critiques de traitement",
|
||
"pillar": "processing-integrity",
|
||
"auditorReady": false,
|
||
"visibility": "internal",
|
||
"linkedMilestones": [
|
||
"pi-flows",
|
||
"pi-audit"
|
||
],
|
||
"updatedAt": "2026-04-04"
|
||
},
|
||
{
|
||
"id": "ev-007",
|
||
"title": "Registre de classification des données",
|
||
"pillar": "confidentiality",
|
||
"auditorReady": false,
|
||
"visibility": "internal",
|
||
"linkedMilestones": [
|
||
"con-classification",
|
||
"con-lifecycle"
|
||
],
|
||
"updatedAt": "2026-03-18"
|
||
},
|
||
{
|
||
"id": "ev-008",
|
||
"title": "Registre des renseignements personnels",
|
||
"pillar": "privacy",
|
||
"auditorReady": false,
|
||
"visibility": "internal",
|
||
"linkedMilestones": [
|
||
"pri-mapping",
|
||
"pri-rules",
|
||
"pri-retention"
|
||
],
|
||
"updatedAt": "2026-04-02"
|
||
},
|
||
{
|
||
"id": "ev-009",
|
||
"title": "Journal des incidents et post-mortems",
|
||
"pillar": "security",
|
||
"auditorReady": true,
|
||
"visibility": "auditor",
|
||
"linkedMilestones": [
|
||
"sec-ir",
|
||
"ava-incidents"
|
||
],
|
||
"updatedAt": "2026-04-10"
|
||
},
|
||
{
|
||
"id": "ev-010",
|
||
"title": "Registre des fournisseurs critiques",
|
||
"pillar": "confidentiality",
|
||
"auditorReady": false,
|
||
"visibility": "internal",
|
||
"linkedMilestones": [
|
||
"con-thirdparty",
|
||
"pri-incidents"
|
||
],
|
||
"updatedAt": "2026-03-27"
|
||
},
|
||
{
|
||
"id": "ev-011",
|
||
"title": "Inventaire des services in-scope",
|
||
"pillar": "availability",
|
||
"auditorReady": true,
|
||
"visibility": "auditor",
|
||
"linkedMilestones": [
|
||
"ava-inventory",
|
||
"sec-governance"
|
||
],
|
||
"updatedAt": "2026-04-11"
|
||
},
|
||
{
|
||
"id": "ev-012",
|
||
"title": "Matrice contrôles ↔ preuves",
|
||
"pillar": "security",
|
||
"auditorReady": true,
|
||
"visibility": "auditor",
|
||
"linkedMilestones": [
|
||
"sec-governance",
|
||
"sec-change",
|
||
"con-review",
|
||
"pri-review",
|
||
"pi-audit"
|
||
],
|
||
"updatedAt": "2026-04-16"
|
||
}
|
||
] |