icdev 0.0.3__py3-none-any.whl

context/compliance/control_families/__init__.py

@@ -0,0 +1,6 @@
+# CUI // SP-CTI
+# Controlled by: Department of Defense
+# CUI Category: CTI
+# Distribution: D
+# POC: ICDEV System Administrator
+# Package marker for PyPI distribution

context/compliance/csp_certifications.json

@@ -0,0 +1,251 @@
+{
+  "_metadata": {
+    "description": "CSP region compliance certification registry (D233)",
+    "version": "1.0.0",
+    "last_updated": "2026-02-21",
+    "sources": [
+      "AWS GovCloud Compliance",
+      "Azure Government Compliance",
+      "Google Cloud Compliance",
+      "Oracle Cloud Compliance",
+      "IBM Cloud Compliance"
+    ]
+  },
+  "il_certification_requirements": {
+    "IL2": ["fedramp_moderate"],
+    "IL4": ["fedramp_moderate"],
+    "IL5": ["fedramp_high", "dod_srg_il5"],
+    "IL6": ["fedramp_high", "dod_srg_il6"]
+  },
+  "certifications": {
+    "aws": {
+      "us-gov-west-1": {
+        "fedramp": "high",
+        "dod_il": ["IL2", "IL4", "IL5"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": true,
+        "fti": true,
+        "itar": true,
+        "fips_140_2": true,
+        "nist_800_171": true
+      },
+      "us-gov-east-1": {
+        "fedramp": "high",
+        "dod_il": ["IL2", "IL4", "IL5"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": true,
+        "fti": true,
+        "itar": true,
+        "fips_140_2": true,
+        "nist_800_171": true
+      },
+      "us-iso-east-1": {
+        "fedramp": "high",
+        "dod_il": ["IL2", "IL4", "IL5", "IL6"],
+        "hipaa": false,
+        "pci_dss": false,
+        "cjis": false,
+        "fti": false,
+        "itar": true,
+        "fips_140_2": true,
+        "nist_800_171": true,
+        "note": "AWS C2S — SECRET/IL6 only"
+      },
+      "us-east-1": {
+        "fedramp": "moderate",
+        "dod_il": ["IL2"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": false,
+        "fti": false,
+        "itar": false,
+        "fips_140_2": true,
+        "nist_800_171": false
+      },
+      "us-west-2": {
+        "fedramp": "moderate",
+        "dod_il": ["IL2"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": false,
+        "fti": false,
+        "itar": false,
+        "fips_140_2": true,
+        "nist_800_171": false
+      }
+    },
+    "azure": {
+      "usgovvirginia": {
+        "fedramp": "high",
+        "dod_il": ["IL2", "IL4", "IL5"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": true,
+        "fti": true,
+        "itar": true,
+        "fips_140_2": true,
+        "nist_800_171": true
+      },
+      "usgovarizona": {
+        "fedramp": "high",
+        "dod_il": ["IL2", "IL4", "IL5"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": true,
+        "fti": true,
+        "itar": true,
+        "fips_140_2": true,
+        "nist_800_171": true
+      },
+      "usdodcentral": {
+        "fedramp": "high",
+        "dod_il": ["IL2", "IL4", "IL5", "IL6"],
+        "hipaa": false,
+        "pci_dss": false,
+        "cjis": false,
+        "fti": false,
+        "itar": true,
+        "fips_140_2": true,
+        "nist_800_171": true,
+        "note": "Azure Government Secret — IL6"
+      },
+      "usdodeast": {
+        "fedramp": "high",
+        "dod_il": ["IL2", "IL4", "IL5", "IL6"],
+        "hipaa": false,
+        "pci_dss": false,
+        "cjis": false,
+        "fti": false,
+        "itar": true,
+        "fips_140_2": true,
+        "nist_800_171": true,
+        "note": "Azure Government Secret — IL6"
+      },
+      "eastus": {
+        "fedramp": "moderate",
+        "dod_il": ["IL2"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": false,
+        "fti": false,
+        "itar": false,
+        "fips_140_2": true,
+        "nist_800_171": false
+      }
+    },
+    "gcp": {
+      "us-east4": {
+        "fedramp": "high",
+        "dod_il": ["IL2", "IL4", "IL5"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": true,
+        "fti": false,
+        "itar": true,
+        "fips_140_2": true,
+        "nist_800_171": true,
+        "note": "Assured Workloads required for IL4/IL5"
+      },
+      "us-central1": {
+        "fedramp": "high",
+        "dod_il": ["IL2", "IL4", "IL5"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": true,
+        "fti": false,
+        "itar": true,
+        "fips_140_2": true,
+        "nist_800_171": true,
+        "note": "Assured Workloads required for IL4/IL5"
+      },
+      "us-east1": {
+        "fedramp": "moderate",
+        "dod_il": ["IL2"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": false,
+        "fti": false,
+        "itar": false,
+        "fips_140_2": true,
+        "nist_800_171": false
+      }
+    },
+    "oci": {
+      "us-langley-1": {
+        "fedramp": "high",
+        "dod_il": ["IL2", "IL4", "IL5"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": true,
+        "fti": true,
+        "itar": true,
+        "fips_140_2": true,
+        "nist_800_171": true,
+        "note": "OCI Government Cloud"
+      },
+      "us-luke-1": {
+        "fedramp": "high",
+        "dod_il": ["IL2", "IL4", "IL5"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": true,
+        "fti": true,
+        "itar": true,
+        "fips_140_2": true,
+        "nist_800_171": true,
+        "note": "OCI Government Cloud"
+      },
+      "us-gov-ashburn-1": {
+        "fedramp": "high",
+        "dod_il": ["IL2", "IL4", "IL5", "IL6"],
+        "hipaa": false,
+        "pci_dss": false,
+        "cjis": false,
+        "fti": false,
+        "itar": true,
+        "fips_140_2": true,
+        "nist_800_171": true,
+        "note": "OCI DoD regions — IL6"
+      },
+      "us-ashburn-1": {
+        "fedramp": "moderate",
+        "dod_il": ["IL2"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": false,
+        "fti": false,
+        "itar": false,
+        "fips_140_2": true,
+        "nist_800_171": false
+      }
+    },
+    "ibm": {
+      "us-south": {
+        "fedramp": "moderate",
+        "dod_il": ["IL2"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": false,
+        "fti": false,
+        "itar": false,
+        "fips_140_2": true,
+        "nist_800_171": false,
+        "note": "IBM Cloud for Government (IC4G) — Dallas"
+      },
+      "us-east": {
+        "fedramp": "moderate",
+        "dod_il": ["IL2"],
+        "hipaa": true,
+        "pci_dss": true,
+        "cjis": false,
+        "fti": false,
+        "itar": false,
+        "fips_140_2": true,
+        "nist_800_171": false,
+        "note": "IBM Cloud for Government (IC4G) — Washington DC"
+      }
+    }
+  }
+}

context/compliance/cssp_report_template.md

@@ -0,0 +1,193 @@
+////////////////////////////////////////////////////////////////////
+CONTROLLED UNCLASSIFIED INFORMATION (CUI) // SP-CTI
+Distribution: Distribution D -- Authorized DoD Personnel Only
+////////////////////////////////////////////////////////////////////
+
+# CYBERSECURITY SERVICE PROVIDER (CSSP) CERTIFICATION REPORT
+## Per DoD Instruction 8530.01
+
+---
+
+## 1. Executive Summary
+
+**System Name:** {{system_name}}
+**System ID:** {{system_id}}
+**Classification:** {{classification}}
+**Assessment Date:** {{assessment_date}}
+**Assessor:** {{assessor}}
+**CSSP Provider:** {{cssp_provider}}
+**Overall Assessment:** {{overall_status}} (Compliant / Partially Compliant / Non-Compliant)
+**CSSP Readiness Score:** {{cssp_score}}%
+
+> Brief summary of system, purpose, and CSSP assessment outcome.
+
+---
+
+## 2. System Description
+
+**System Purpose:** {{system_purpose}}
+**Authorization Boundary:** {{ato_boundary}}
+**Operating Environment:** {{operating_environment}}
+**Data Types Handled:** {{data_types}}
+**User Community:** {{user_community}}
+**System Owner:** {{system_owner}}
+**Authorizing Official:** {{authorizing_official}}
+**ISSM:** {{issm_name}}
+**ISSO:** {{isso_name}}
+
+---
+
+## 3. CSSP Functional Area Assessment
+
+### 3.1 Identify (ID)
+
+**Status:** {{identify_status}}
+**Score:** {{identify_score}}%
+**Requirements Satisfied:** {{identify_satisfied}} / {{identify_total}}
+
+{{identify_details}}
+
+### 3.2 Protect (PR)
+
+**Status:** {{protect_status}}
+**Score:** {{protect_score}}%
+**Requirements Satisfied:** {{protect_satisfied}} / {{protect_total}}
+
+{{protect_details}}
+
+### 3.3 Detect (DE)
+
+**Status:** {{detect_status}}
+**Score:** {{detect_score}}%
+**Requirements Satisfied:** {{detect_satisfied}} / {{detect_total}}
+
+{{detect_details}}
+
+### 3.4 Respond (RS)
+
+**Status:** {{respond_status}}
+**Score:** {{respond_score}}%
+**Requirements Satisfied:** {{respond_satisfied}} / {{respond_total}}
+
+{{respond_details}}
+
+### 3.5 Sustain (SU)
+
+**Status:** {{sustain_status}}
+**Score:** {{sustain_score}}%
+**Requirements Satisfied:** {{sustain_satisfied}} / {{sustain_total}}
+
+{{sustain_details}}
+
+---
+
+## 4. Integration Points
+
+### 4.1 SIEM Integration
+
+**Splunk Forwarding:** {{splunk_status}}
+**ELK Forwarding:** {{elk_status}}
+**Log Sources Configured:** {{log_source_count}}
+**Log Source Details:**
+
+{{siem_details}}
+
+### 4.2 SOC Coordination
+
+**CSSP SOC:** {{soc_name}}
+**SOC Contact:** {{soc_contact}}
+**Escalation Procedures:** {{escalation_status}}
+**IR Plan Status:** {{ir_plan_status}}
+
+### 4.3 Vulnerability Management
+
+**Scan Cadence:** {{scan_cadence}}
+**Last Scan Date:** {{last_scan_date}}
+**Open Critical/High:** {{open_critical_high}}
+**SLA Compliance:** {{sla_compliant}}
+
+### 4.4 PKI/CAC Integration
+
+**Authentication Method:** {{auth_method}}
+**PKI Status:** {{pki_status}}
+**CAC Enforcement:** {{cac_enforcement}}
+
+---
+
+## 5. Evidence Summary
+
+**Total Evidence Artifacts:** {{evidence_count}}
+
+| Category | Artifacts | Status |
+|----------|-----------|--------|
+| Access Control | {{ac_evidence_count}} | {{ac_evidence_status}} |
+| Audit & Monitoring | {{audit_evidence_count}} | {{audit_evidence_status}} |
+| Configuration Mgmt | {{cm_evidence_count}} | {{cm_evidence_status}} |
+| Incident Response | {{ir_evidence_count}} | {{ir_evidence_status}} |
+| Security Assessment | {{sa_evidence_count}} | {{sa_evidence_status}} |
+
+{{evidence_details}}
+
+---
+
+## 6. Findings Summary
+
+### 6.1 Critical Findings (Blocking)
+
+{{critical_findings}}
+
+### 6.2 High Findings
+
+{{high_findings}}
+
+### 6.3 Moderate/Low Findings
+
+{{moderate_low_findings}}
+
+---
+
+## 7. Risk Acceptance
+
+{{risk_acceptances}}
+
+---
+
+## 8. Remediation Plan
+
+| Finding | Severity | Remediation | Target Date | Owner |
+|---------|----------|-------------|-------------|-------|
+{{remediation_items}}
+
+---
+
+## 9. Certification Recommendation
+
+**Recommendation:** {{certification_recommendation}}
+**Conditions:** {{certification_conditions}}
+**Valid Until:** {{certification_expiry}}
+**Next Assessment:** {{next_assessment_date}}
+
+---
+
+## 10. Points of Contact
+
+| Role | Name | Organization | Email | Phone |
+|------|------|--------------|-------|-------|
+| System Owner | {{owner_name}} | {{owner_org}} | {{owner_email}} | {{owner_phone}} |
+| ISSM | {{issm_name}} | {{issm_org}} | {{issm_email}} | {{issm_phone}} |
+| ISSO | {{isso_name}} | {{isso_org}} | {{isso_email}} | {{isso_phone}} |
+| CSSP POC | {{cssp_poc_name}} | {{cssp_poc_org}} | {{cssp_poc_email}} | {{cssp_poc_phone}} |
+| Authorizing Official | {{ao_name}} | {{ao_org}} | {{ao_email}} | {{ao_phone}} |
+
+---
+
+## Revision History
+
+| Version | Date | Author | Description |
+|---------|------|--------|-------------|
+{{revision_history}}
+
+////////////////////////////////////////////////////////////////////
+CONTROLLED UNCLASSIFIED INFORMATION (CUI) // SP-CTI
+Distribution: Distribution D -- Authorized DoD Personnel Only
+////////////////////////////////////////////////////////////////////

context/compliance/cui_templates/__init__.py

@@ -0,0 +1,6 @@
+# CUI // SP-CTI
+# Controlled by: Department of Defense
+# CUI Category: CTI
+# Distribution: D
+# POC: ICDEV System Administrator
+# Package marker for PyPI distribution

context/compliance/cui_templates/banner_block.txt

@@ -0,0 +1,4 @@
+////////////////////////////////////////////////////////////////////
+CONTROLLED UNCLASSIFIED INFORMATION (CUI) // SP-CTI
+Distribution: Distribution D -- Authorized DoD Personnel Only
+////////////////////////////////////////////////////////////////////

context/compliance/cui_templates/code_header.txt

@@ -0,0 +1,8 @@
+# ////////////////////////////////////////////////////////////////////
+# CONTROLLED UNCLASSIFIED INFORMATION (CUI) // SP-CTI
+# Controlled by: Department of Defense
+# CUI Category: CTI (Controlled Technical Information)
+# Distribution: Distribution D -- Authorized DoD Personnel Only
+# POC: ICDEV System Administrator
+# Decontrol on: 10 years from creation date
+# ////////////////////////////////////////////////////////////////////

context/compliance/cui_templates/document_template.md

@@ -0,0 +1,35 @@
+////////////////////////////////////////////////////////////////////
+CONTROLLED UNCLASSIFIED INFORMATION (CUI) // SP-CTI
+Distribution: Distribution D -- Authorized DoD Personnel Only
+////////////////////////////////////////////////////////////////////
+
+**CUI Designation Indicator**
+
+| Field | Value |
+|-------|-------|
+| Controlled By | Department of Defense |
+| CUI Category | CTI (Controlled Technical Information) |
+| Distribution | Distribution D -- Authorized DoD Personnel Only |
+| POC | {{poc_name}} |
+| Decontrol On | {{decontrol_date}} |
+
+---
+
+{{document_content}}
+
+---
+
+**Document Metadata**
+
+| Field | Value |
+|-------|-------|
+| Document Title | {{document_title}} |
+| Classification | CUI // SP-CTI |
+| Created | {{creation_date}} |
+| Author | {{author}} |
+| Project | {{project_id}} |
+| Version | {{version}} |
+
+////////////////////////////////////////////////////////////////////
+CUI // SP-CTI | Department of Defense
+////////////////////////////////////////////////////////////////////