framework-mcp 2.4.4 → 2.4.6

package/dist/core/safeguard-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safeguard-manager.d.ts","sourceRoot":"","sources":["../../src/core/safeguard-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAc,MAAM,oBAAoB,CAAC;AAElE,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,UAAU,CAAwC;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAQ;IAC9C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAkB;IAChE,OAAO,CAAC,kBAAkB,CAAyB;IACnD,OAAO,CAAC,WAAW,CAAa;;IAQzB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,GAAE,OAAe,GAAG,gBAAgB,GAAG,IAAI;IA4BnG,uBAAuB,IAAI,MAAM,EAAE;IAgBnC,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAIpD,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAerD,OAAO,CAAC,yBAAyB;IAajC,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,2BAA2B;IAmCnC;;OAEG;IACI,aAAa,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE;IAO7D;;OAEG;IACI,UAAU,IAAI,IAAI;IAKzB,OAAO,CAAC,yBAAyB;IAajC,OAAO,CAAC,yBAAyB;IA2BjC,OAAO,CAAC,oBAAoB;CA65gB7B"}
+{"version":3,"file":"safeguard-manager.d.ts","sourceRoot":"","sources":["../../src/core/safeguard-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAc,MAAM,oBAAoB,CAAC;AAElE,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,UAAU,CAAwC;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAQ;IAC9C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAkB;IAChE,OAAO,CAAC,kBAAkB,CAAyB;IACnD,OAAO,CAAC,WAAW,CAAa;;IAQzB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,GAAE,OAAe,GAAG,gBAAgB,GAAG,IAAI;IA4BnG,uBAAuB,IAAI,MAAM,EAAE;IAgBnC,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAIpD,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAerD,OAAO,CAAC,yBAAyB;IAajC,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,2BAA2B;IAmCnC;;OAEG;IACI,aAAa,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE;IAO7D;;OAEG;IACI,UAAU,IAAI,IAAI;IAKzB,OAAO,CAAC,yBAAyB;IAajC,OAAO,CAAC,yBAAyB;IA2BjC,OAAO,CAAC,oBAAoB;CAwzgB7B"}

package/dist/core/safeguard-manager.js

@@ -2820,33 +2820,23 @@ export class SafeguardManager {
                 assetType: ["Users"],
                 securityFunction: ["Identify"],
                 governanceElements: [
-                    "Establish and maintain an inventory of all accounts managed in the enterprise",
-                    "The inventory must include both user and administrator accounts",
-                    "At a minimum, should contain the person's name, username, start/stop dates, and department",
+                    "Establish and maintain",
+                    "Must include",
                     "Validate that all active accounts are authorized, on a recurring schedule at a minimum quarterly, or more frequently"
                 ],
                 coreRequirements: [
                     "Inventory of Accounts"
                 ],
                 subTaxonomicalElements: [
-                    "Establish",
-                    "Maintain",
-                    "Validate that all active accounts are authorized",
-                    "Recurring schedule",
-                    "Must Include",
-                    "At a minimum",
-                    "Minimum Quarterly",
-                    "More Frequently",
                     "User Accounts",
                     "Administrator Accounts",
+                    "Service Accounts",
                     "Name",
                     "Username",
                     "Start Stop Dates",
                     "Department"
                 ],
-                implementationSuggestions: [
-                    "Account and Access Control Management",
-                    "Identity and Access Management Tool"
+                implementationSuggestions: [ // Gray - Implementation suggestions
                 ],
                 relatedSafeguards: ["1.1", "2.1", "5.2", "5.3", "5.4", "5.5", "5.6", "6.1", "6.2", "6.7", "12.8"],
                 systemPromptFull: {
@@ -2903,22 +2893,16 @@ export class SafeguardManager {
                 assetType: ["Users"],
                 securityFunction: ["Protect"],
                 governanceElements: [
-                    "Use unique passwords for all enterprise assets",
-                    "Best practice implementation includes, at a minimum, an 8-character password for accounts using Multi-Factor Authentication (MFA) and a 14-character password for accounts not using MFA"
+                    "Use",
+                    "At a minimum, an 8-character password for accounts using Multi-Factor Authentication (MFA) and a 14-character password for accounts not using MFA"
                 ],
                 coreRequirements: [
                     "Unique Passwords"
                 ],
                 subTaxonomicalElements: [
-                    "Use",
-                    "At a minimum",
-                    "All Enterprise Assets",
-                    "8-character password for accounts using MFA",
-                    "14-character password for accounts not using MFA"
+                    "All Enterprise Assets"
                 ],
-                implementationSuggestions: [
-                    "Account and Access Control Management",
-                    "Password Management Tool"
+                implementationSuggestions: [ // Gray - Implementation suggestions
                 ],
                 relatedSafeguards: ["5.1"],
                 systemPromptFull: {
@@ -2975,20 +2959,16 @@ export class SafeguardManager {
                 assetType: ["Users"],
                 securityFunction: ["Protect"],
                 governanceElements: [
-                    "Delete or disable any dormant accounts after a period of 45 days of inactivity, where supported"
+                    "after a period of 45 days of inactivity",
+                    "where supported"
                 ],
                 coreRequirements: [
                     "Dormant Accounts"
                 ],
                 subTaxonomicalElements: [
-                    "Disable",
-                    "Delete",
-                    "Period of 45 days of inactivity",
-                    "Where Supported"
+                    "Dormant Accounts"
                 ],
-                implementationSuggestions: [
-                    "Account and Access Control Management",
-                    "Identity and Access Management Tool"
+                implementationSuggestions: [ // Gray - Implementation suggestions
                 ],
                 relatedSafeguards: ["5.1"],
                 systemPromptFull: {
@@ -3045,22 +3025,18 @@ export class SafeguardManager {
                 assetType: ["Users"],
                 securityFunction: ["Protect"],
                 governanceElements: [
-                    "Restrict administrator privileges to dedicated administrator accounts on enterprise assets",
-                    "Conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user's primary, non-privileged account"
+                    "Restrict"
                 ],
                 coreRequirements: [
                     "Administrator Privileges",
                     "Dedicated Admin Accounts"
                 ],
                 subTaxonomicalElements: [
-                    "Restrict",
                     "Enterprise assets",
                     "User's primary, non-privileged account",
                     "General Computing Activities"
                 ],
                 implementationSuggestions: [
-                    "Account and Access Control Management",
-                    "Identity and Access Management Tool",
                     "Such as",
                     "Internet browsing",
                     "Email",
@@ -3121,29 +3097,20 @@ export class SafeguardManager {
                 assetType: ["Users"],
                 securityFunction: ["Identify"],
                 governanceElements: [
-                    "Establish and maintain an inventory of service accounts",
-                    "The inventory, at a minimum, must contain department owner, review date, and purpose",
-                    "Perform service account reviews to validate that all active accounts are authorized, on a recurring schedule at a minimum quarterly, or more frequently"
+                    "Establish and maintain",
+                    "at a minimum, must contain",
+                    "Perform service account reviews to validate that all active accounts are authorized",
+                    "recurring schedule at a minimum quarterly, or more frequently"
                 ],
                 coreRequirements: [
                     "Inventory of Service Accounts"
                 ],
                 subTaxonomicalElements: [
-                    "Establish",
-                    "Maintain",
-                    "At a Minimum Must Contain",
-                    "Perform service account reviews to validate that all active accounts are authorized",
-                    "On a recurring schedule",
                     "Department Owner",
                     "Review date",
-                    "Purpose",
-                    "At a minimum quarterly",
-                    "More frequently",
-                    "Or"
+                    "Purpose"
                 ],
-                implementationSuggestions: [
-                    "Account and Access Control Management",
-                    "Identity and Access Management Tool"
+                implementationSuggestions: [ // Gray - Implementation suggestions
                 ],
                 relatedSafeguards: ["5.1"],
                 systemPromptFull: {
@@ -3200,20 +3167,16 @@ export class SafeguardManager {
                 assetType: ["Users"],
                 securityFunction: ["Govern"],
                 governanceElements: [
-                    "Centralize account management through a directory or identity service"
+                    "Centralize"
                 ],
                 coreRequirements: [
                     "Account Management"
                 ],
                 subTaxonomicalElements: [
-                    "Centralize",
                     "Directory Service",
-                    "Identity Service",
-                    "Or"
+                    "Identity Service"
                 ],
-                implementationSuggestions: [
-                    "Account and Access Control Management",
-                    "Identity and Access Management Tool"
+                implementationSuggestions: [ // Gray - Implementation suggestions
                 ],
                 relatedSafeguards: ["5.1", "6.6", "6.7", "12.5"],
                 systemPromptFull: {
@@ -3267,30 +3230,22 @@ export class SafeguardManager {
                 title: "Establish an Access Granting Process",
                 description: "Establish and follow a documented process, preferably automated, for granting access to enterprise assets upon new hire or role change of a user.",
                 implementationGroup: "IG1",
-                assetType: ["Users"],
+                assetType: ["Documentation"],
                 securityFunction: ["Govern"],
                 governanceElements: [
                     "Establish",
-                    "Follow",
-                    "Account and Access Control Management",
-                    "Account and Credential Management Policy/Process",
-                    "Documentation"
+                    "Follow"
                 ],
                 coreRequirements: [
                     "documented process",
                     "granting access to enterprise assets"
                 ],
                 subTaxonomicalElements: [
-                    "preferably automated",
                     "upon new hire",
                     "role change of a user",
-                    "New Hire",
-                    "Role Change",
                     "Enterprise assets"
                 ],
-                implementationSuggestions: [
-                    "Account and Access Control Management",
-                    "Account and Credential Management Policy/Process"
+                implementationSuggestions: [ // Gray - Implementation suggestions
                 ],
                 relatedSafeguards: ["5.1", "6.7", "6.8"],
                 systemPromptFull: {
@@ -3344,25 +3299,17 @@ export class SafeguardManager {
                 title: "Establish an Access Revoking Process",
                 description: "Establish and follow a process, preferably automated, for revoking access to enterprise assets, through disabling accounts immediately upon termination, rights revocation, or role change of a user. Disabling accounts, instead of deleting accounts, may be necessary to preserve audit trails.",
                 implementationGroup: "IG1",
-                assetType: ["Users"],
+                assetType: ["Documentation"],
                 securityFunction: ["Govern"],
                 governanceElements: [
                     "Establish",
                     "Follow",
-                    "Account and Access Control Management",
-                    "Account and Credential Management Policy/Process",
-                    "Documentation"
+                    "Disabling Accounts, instead of Deleting accounts, may be necessary to preserve audit trails"
                 ],
                 coreRequirements: [
-                    "process",
-                    "revoking access to enterprise assets",
-                    "disabling accounts immediately"
+                    "Access Revoking Process"
                 ],
                 subTaxonomicalElements: [
-                    "preferably automated",
-                    "upon termination",
-                    "rights revocation",
-                    "role change of a user",
                     "Role Change",
                     "Termination",
                     "Rights revocation",
@@ -3370,9 +3317,7 @@ export class SafeguardManager {
                     "Disabling accounts immediately"
                 ],
                 implementationSuggestions: [
-                    "Disabling accounts, instead of deleting accounts, may be necessary to preserve audit trails",
-                    "Account and Access Control Management",
-                    "Account and Credential Management Policy/Process"
+                    "Preferably Automated"
                 ],
                 relatedSafeguards: ["5.1", "6.7"],
                 systemPromptFull: {
@@ -3430,24 +3375,18 @@ export class SafeguardManager {
                 securityFunction: ["Protect"],
                 governanceElements: [
                     "Require",
-                    "Account and Access Control Management",
-                    "Multi-Factor Authentication Tool"
+                    "Enforce",
+                    "Where Supported"
                 ],
                 coreRequirements: [
                     "all externally-exposed enterprise or third-party applications to enforce MFA",
-                    "where supported"
+                    "MFA - Multi Factor Authentication"
                 ],
                 subTaxonomicalElements: [
-                    "ALL Externally Exposed Applications",
-                    "Enforce",
-                    "Where supported"
+                    "MFA for all externally exposed enterprise or third-party applications"
                 ],
                 implementationSuggestions: [
-                    "Enforcing MFA through a directory service or SSO provider is a satisfactory implementation of this Safeguard",
-                    "Directory service",
-                    "SSO Provider",
-                    "Account and Access Control Management",
-                    "Multi-Factor Authentication Tool"
+                    "Enforcing MFA through a directory service or SSO provider is a satisfactory implementation of this Safeguard"
                 ],
                 relatedSafeguards: ["2.1", "4.1"],
                 systemPromptFull: {
@@ -3504,20 +3443,15 @@ export class SafeguardManager {
                 assetType: ["Users"],
                 securityFunction: ["Protect"],
                 governanceElements: [
-                    "Require",
-                    "Account and Access Control Management",
-                    "Multi-Factor Authentication Tool"
+                    "Require"
                 ],
                 coreRequirements: [
-                    "MFA",
-                    "remote network access"
+                    "MFA for remote network access"
                 ],
                 subTaxonomicalElements: [
-                    "Remote Network Access"
+                    "MFA for Remote Network Access"
                 ],
-                implementationSuggestions: [
-                    "Account and Access Control Management",
-                    "Multi-Factor Authentication Tool"
+                implementationSuggestions: [ // Gray - Implementation suggestions
                 ],
                 relatedSafeguards: ["4.2", "12.7"],
                 systemPromptFull: {
@@ -3575,25 +3509,17 @@ export class SafeguardManager {
                 securityFunction: ["Protect"],
                 governanceElements: [
                     "Require",
-                    "Account and Access Control Management",
-                    "Multi-Factor Authentication Tool"
+                    "Where Supported"
                 ],
                 coreRequirements: [
-                    "MFA",
-                    "all administrative access accounts",
-                    "all enterprise assets"
+                    "MFA on all administrative access accounts"
                 ],
                 subTaxonomicalElements: [
-                    "where supported",
                     "All Admin Access Accounts",
                     "All enterprise assets",
-                    "Onsite Management",
-                    "Service Provider",
-                    "Or"
+                    "Onsite Management accounts or Service Provider Admin Accounts"
                 ],
-                implementationSuggestions: [
-                    "Account and Access Control Management",
-                    "Multi-Factor Authentication Tool"
+                implementationSuggestions: [ // Gray - Implementation suggestions
                 ],
                 relatedSafeguards: ["4.1"],
                 systemPromptFull: {
@@ -3647,30 +3573,22 @@ export class SafeguardManager {
                 title: "Establish and Maintain an Inventory of Authentication and Authorization Systems",
                 description: "Establish and maintain an inventory of the enterprise's authentication and authorization systems, including those hosted on-site or at a remote service provider. Review and update the inventory, at a minimum, annually, or more frequently.",
                 implementationGroup: "IG2",
-                assetType: ["software"],
+                assetType: ["Software"],
                 securityFunction: ["Identify"],
                 governanceElements: [
                     "Establish",
                     "maintain",
-                    "Review and update",
-                    "Account and Access Control Management",
-                    "Account and Credential Management Policy/Process"
+                    "Review and update inventory",
+                    "At a minimum, monthly or more frequenlty"
                 ],
                 coreRequirements: [
                     "inventory of the enterprise's authentication and authorization systems"
                 ],
                 subTaxonomicalElements: [
-                    "including those hosted on-site or at a remote service provider",
-                    "at a minimum, annually, or more frequently",
-                    "Hosted on-site",
-                    "Remote Service Provider",
-                    "Or",
-                    "At a minimum Annually",
-                    "More frequently"
+                    "hosted on-site",
+                    "hosted at a remote service provider"
                 ],
-                implementationSuggestions: [
-                    "Account and Access Control Management",
-                    "Account and Credential Management Policy/Process"
+                implementationSuggestions: [ // Gray - Implementation suggestions
                 ],
                 relatedSafeguards: ["1.1", "2.1", "3.3", "5.6", "6.7"],
                 systemPromptFull: {
@@ -3728,27 +3646,17 @@ export class SafeguardManager {
                 securityFunction: ["Protect"],
                 governanceElements: [
                     "Centralize",
-                    "Account and Access Control Management",
-                    "Account and Credential Management Policy/Process",
-                    "Identity and Access Management Tool"
+                    "Where Supported"
                 ],
                 coreRequirements: [
-                    "access control",
-                    "all enterprise assets"
+                    "access control"
                 ],
                 subTaxonomicalElements: [
                     "through a directory service or SSO provider",
-                    "where supported",
-                    "Directory Service",
-                    "SSO Provider",
-                    "Or",
-                    "All enterprise assets",
-                    "Where Supported"
+                    "Directory Service or SSO Provider",
+                    "All enterprise assets"
                 ],
-                implementationSuggestions: [
-                    "Account and Access Control Management",
-                    "Account and Credential Management Policy/Process",
-                    "Identity and Access Management Tool"
+                implementationSuggestions: [ // Gray - Implementation suggestions
                 ],
                 relatedSafeguards: ["4.1", "5.1", "5.6", "6.1", "6.2", "6.6", "12.5", "12.7"],
                 systemPromptFull: {
@@ -3807,30 +3715,21 @@ export class SafeguardManager {
                 governanceElements: [
                     "Define",
                     "maintain",
-                    "Perform access control reviews of enterprise assets to validate that all privileges are authorized, on a recurring schedule at a minimum annually, or more frequently",
-                    "Account and Access Control Management",
-                    "Account and Credential Management Policy/Process",
-                    "Identity and Access management Tool"
+                    "Necessary",
+                    "Perform access control reviews of enterprise assets to validate that all privileges are authorized, on a recurring schedule",
+                    "At a mimimum Annually, or more Frequently"
                 ],
                 coreRequirements: [
-                    "role-based access control",
-                    "determining and documenting the access rights necessary for each role within the enterprise to successfully carry out its assigned duties"
+                    "role-based access control"
                 ],
                 subTaxonomicalElements: [
                     "Access rights",
                     "Each Role",
-                    "Necessary",
-                    "Successfully carry out its assigned duties",
+                    "Neccesary to Successfully carry out its assigned duties",
                     "Determining",
-                    "Documenting",
-                    "At a minimum Annually",
-                    "More frequently",
-                    "Or"
+                    "Documenting"
                 ],
-                implementationSuggestions: [
-                    "Account and Access Control Management",
-                    "Account and Credential Management Policy/Process",
-                    "Identity and Access management Tool"
+                implementationSuggestions: [ // Gray - Implementation suggestions
                 ],
                 relatedSafeguards: ["3.3", "4.1", "6.1"],
                 systemPromptFull: {