intuitem / ciso-assistant-community

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +60 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber, NCSC, ECC, SCF and so much more
https://intuitem.com
Other
1.14k stars 148 forks source link

Transpose risk matrix #298

Open eric-intuitem opened 6 months ago

eric-intuitem commented 6 months ago

Problem statement I want to define a risk matrix with probability horizontally and impact vertically. Expected behavior In a matrix definition, it shall be possible to transpose probability and impact. The default shall be probability vertically and impact horizontally, for compatibility. This can be for example a boolean value named "transpose".

Request by shaws3976 on Discord

eric-intuitem commented 6 months ago

The transposition and also the direction of axes shall be flexible on frontend side, not in the data model. This is much more flexible, and avoid having 8 versions of each matrix. The layout parameters shall be 3 booleans attached to a loaded matrix, editable in the governance section:

The default values are false, which correspond to current behaviour.