62:I[707087,["/_next/static/immutable/chunks/3arlv5bvukoo2.js","/_next/static/immutable/chunks/39v64hmfyo-sr.js","/_next/static/immutable/chunks/2nvof3-29tvc3.js","/_next/static/immutable/chunks/3tjobt77z_9dj.js","/_next/static/immutable/chunks/04j_o97cgxn2x.js","/_next/static/immutable/chunks/3upr08c9vtj8w.js","/_next/static/immutable/chunks/1ww0328si-u8x.js","/_next/static/immutable/chunks/11mfl5ymqld9-.js","/_next/static/immutable/chunks/2xxcqy6ppds3l.js","/_next/static/immutable/chunks/1bpgyrs5qflhu.js","/_next/static/immutable/chunks/0-6vu2ul1h6ld.js","/_next/static/immutable/chunks/43_s7jweyypoh.js","/_next/static/immutable/chunks/0p6vao205o1jc.js","/_next/static/immutable/chunks/1_kyvgkyokw92.js","/_next/static/immutable/chunks/1lo-zn37dolb5.js","/_next/static/immutable/chunks/1v8k6yxw1rg0u.js"],"RegistryDependencies"] 63:I[314491,["/_next/static/immutable/chunks/3arlv5bvukoo2.js","/_next/static/immutable/chunks/39v64hmfyo-sr.js","/_next/static/immutable/chunks/2nvof3-29tvc3.js","/_next/static/immutable/chunks/3tjobt77z_9dj.js","/_next/static/immutable/chunks/04j_o97cgxn2x.js","/_next/static/immutable/chunks/3upr08c9vtj8w.js","/_next/static/immutable/chunks/1ww0328si-u8x.js","/_next/static/immutable/chunks/11mfl5ymqld9-.js","/_next/static/immutable/chunks/2xxcqy6ppds3l.js","/_next/static/immutable/chunks/1bpgyrs5qflhu.js","/_next/static/immutable/chunks/0-6vu2ul1h6ld.js","/_next/static/immutable/chunks/43_s7jweyypoh.js","/_next/static/immutable/chunks/0p6vao205o1jc.js","/_next/static/immutable/chunks/1_kyvgkyokw92.js","/_next/static/immutable/chunks/1lo-zn37dolb5.js","/_next/static/immutable/chunks/1v8k6yxw1rg0u.js"],"FilesView"] 64:Tcc29,'use client' import * as React from 'react' import { AlertCircle, AlertTriangle, ArrowUpRight, BadgeCheck, Calendar, Check, CheckCircle2, Clock, Download, Eye, FileDown, FileText, Filter, KeyRound, Lock, RefreshCw, Search, Server, Shield, ShieldCheck, Users, X, Zap, } from 'lucide-react' import { cn } from '@/lib/utils' import { Badge } from '@/components/ui/badge' import { Button } from '@/components/ui/button' import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card' import { Progress } from '@/components/ui/progress' import { Separator } from '@/components/ui/separator' import { Table, TableBody, TableCell, TableHead, TableHeader, TableRow } from '@/components/ui/table' import { Tabs, TabsList, TabsTrigger } from '@/components/ui/tabs' export interface PillarData { code: string title: string description: string score: number passed: number total: number status: string statusVariant: 'success' | 'warning' | 'secondary' highlights: string[] iconType: 'key' | 'shield' | 'activity' | 'users' | 'lock' | 'server' | 'file' } export interface EvidenceTestItem { id: string code: string name: string description: string category: 'Identity & Auth' | 'Cloud Infrastructure' | 'Security Operations' | 'DevOps & CI/CD' | 'People & HR' frequency: 'Continuous (1h)' | 'Daily' | 'Monthly' | 'Quarterly' status: 'Passing' | 'Needs Attention' statusVariant: 'success' | 'warning' artifact: string verified: boolean lastTested: string auditorNotes: string } export interface FrameworkConfig { id: string tabLabel: string name: string badge: string standard: string score: number readinessLabel: string period: string auditor: string totalPassing: number totalTests: number pillars: PillarData[] tests: EvidenceTestItem[] trustCenterUrl: string } export interface ComplianceSoc2ReadinessProps extends React.HTMLAttributes { defaultFramework?: string } const frameworksData: Record = { soc2: { id: 'soc2', tabLabel: 'SOC 2 Type II', name: 'SOC 2 Type II Readiness', badge: 'Security & Confidentiality', standard: 'AICPA Trust Services Criteria (CC1–CC9)', score: 96, readinessLabel: '96% Audit Ready', period: 'Jan 1, 2026 – Dec 31, 2026', auditor: 'KPMG LLP · Sarah Jenkins, CPA/CISA', totalPassing: 69, totalTests: 71, pillars: [ { code: 'CC1', title: 'Access Control & IAM', description: 'Identity federation, MFA enforcement, and least-privilege role provisioning.', score: 100, passed: 24, total: 24, status: '100% Passed · 24/24 tests', statusVariant: 'success', highlights: ['FIDO2/WebAuthn Hardware MFA', 'Just-In-Time Role Elevation'], iconType: 'key', }, { code: 'CC2', title: 'Encryption & Key Management', description: 'Data encryption in-transit & at rest with automated CMK key rotation.', score: 98, passed: 18, total: 18, status: '98% Passed · 18/18 tests', statusVariant: 'success', highlights: ['AWS KMS Envelope CMKs', 'TLS 1.3 Strict Cipher Suites'], iconType: 'shield', }, { code: 'CC3', title: 'Incident Response & Logging', description: 'Immutable audit trail ingesters, P1 runbooks, and real-time SIEM alerts.', score: 94, passed: 15, total: 16, status: '94% Passed · 15/16 tests', statusVariant: 'warning', highlights: ['Immutable WORM S3 Bucket', 'Quarterly Drill Executed'], iconType: 'activity', }, { code: 'CC4', title: 'Employee Security & Vendor Risk', description: 'Background checks, awareness training, and third-party vendor DPA reviews.', score: 92, passed: 12, total: 13, status: '92% Passed · 12/13 tests', statusVariant: 'secondary', highlights: ['100% Staff Security Training', 'Tier 1 Vendor DPA Signed'], iconType: 'users', }, ], tests: [ { id: 'test-soc2-1', code: 'CC6.1', name: 'MFA Enforced for All Staff', description: 'Continuous sync with Okta IAM confirming hardware/TOTP MFA active on all active seats.', category: 'Identity & Auth', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'okta-mfa-sync-v2.json', verified: true, lastTested: '4m ago', auditorNotes: '100% of 248 accounts verified with WebAuthn/FIDO2 hardware key enforcement.', }, { id: 'test-soc2-2', code: 'CC6.6', name: 'DB Storage Encrypted with KMS', description: 'All production RDS PostgreSQL and Redis storage volumes encrypted at rest with AWS KMS.', category: 'Cloud Infrastructure', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'aws-kms-rds-audit-prod.json', verified: true, lastTested: '12m ago', auditorNotes: 'AES-256 GCM encryption validated across primary cluster and 4 replica volumes.', }, { id: 'test-soc2-3', code: 'CC7.2', name: 'Quarterly Penetration Test Completed', description: 'Independent gray-box network and web application penetration test with zero open criticals.', category: 'Security Operations', frequency: 'Quarterly', status: 'Passing', statusVariant: 'success', artifact: 'BishopFox-Pentest-Q2-2026.pdf', verified: true, lastTested: 'Aug 12, 2026', auditorNotes: 'Full remediation verified within 14-day SLA. Attestation signed by Bishop Fox.', }, { id: 'test-soc2-4', code: 'CC6.7', name: 'Automated Backup Verification Daily', description: 'Daily point-in-time cross-region database snapshot validation and SHA-256 checksum test.', category: 'Cloud Infrastructure', frequency: 'Daily', status: 'Passing', statusVariant: 'success', artifact: 's3-replica-checksum-20260821.log', verified: true, lastTested: '2h ago', auditorNotes: 'Automated restore drill executed with RPO < 5m and RTO < 15m.', }, { id: 'test-soc2-5', code: 'CC8.1', name: 'Branch Protection & PR Reviews Enforced', description: 'GitHub repository rulesets require min 2 peer reviews, signed commits, and passing CI.', category: 'DevOps & CI/CD', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'github-branch-policy-main.json', verified: true, lastTested: '18m ago', auditorNotes: 'Zero bypass permissions granted. Administrator force-push strictly disabled.', }, { id: 'test-soc2-6', code: 'CC9.2', name: 'Third-Party Vendor Risk Assessment', description: 'Annual SOC 2 Type II report collection and DPA compliance review for active SaaS vendors.', category: 'People & HR', frequency: 'Monthly', status: 'Needs Attention', statusVariant: 'warning', artifact: 'vendor-risk-matrix-2026.csv', verified: false, lastTested: 'Yesterday', auditorNotes: '1 vendor report renewal pending (Datadog EU renewal contract awaiting counter-signature).', }, ], trustCenterUrl: 'https://trust.uipkge.dev', }, iso27001: { id: 'iso27001', tabLabel: 'ISO 27001', name: 'ISO/IEC 27001:2022 ISMS', badge: 'Information Security Management', standard: 'Annex A Controls (A.5 – A.8) · Stage 2 Ready', score: 94, readinessLabel: '94% Stage 2 Ready', period: 'Audit Cycle 2026–2027', auditor: 'BSI Group · Henrik Lindqvist, Lead Auditor', totalPassing: 88, totalTests: 93, pillars: [ { code: 'A.5', title: 'Organizational Controls', description: 'Information security policies, supplier governance, and asset inventories.', score: 96, passed: 35, total: 37, status: '96% Passed · 35/37 controls', statusVariant: 'success', highlights: ['Approved Security Policies', 'Supplier Risk Classification'], iconType: 'shield', }, { code: 'A.6', title: 'People Controls', description: 'Screening, remote work guidelines, and continuous infosec education.', score: 92, passed: 8, total: 8, status: '92% Passed · 8/8 controls', statusVariant: 'success', highlights: ['Annual Training Certification', 'Formal Disciplinary Rules'], iconType: 'users', }, { code: 'A.7', title: 'Physical Controls', description: 'Physical security perimeters, clear desk, and device screen lock policies.', score: 100, passed: 14, total: 14, status: '100% Passed · 14/14 controls', statusVariant: 'success', highlights: ['Zero Trust Cloud Infrastructure', 'Automated Screen Locking'], iconType: 'lock', }, { code: 'A.8', title: 'Technological Controls', description: 'Endpoint protection, access rights, network security, and vulnerability management.', score: 93, passed: 31, total: 34, status: '93% Passed · 31/34 controls', statusVariant: 'warning', highlights: ['EDR on 100% Managed Laptops', 'Zero Trust Network Architecture'], iconType: 'server', }, ], tests: [ { id: 'test-iso-1', code: 'A.8.2', name: 'Privileged Access Rights Review', description: 'Quarterly review and revocation of administrative privileges on AWS and cloud IdPs.', category: 'Identity & Auth', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'iam-privileged-access-matrix.json', verified: true, lastTested: '8m ago', auditorNotes: 'All root credentials locked behind hardware token in safe storage.', }, { id: 'test-iso-2', code: 'A.8.24', name: 'Use of Cryptography & Key Management', description: 'Enforcement of cryptographic standard policies for data in transit and at rest.', category: 'Cloud Infrastructure', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'crypto-policy-attestation.json', verified: true, lastTested: '15m ago', auditorNotes: 'TLS 1.3 enforced globally. Insecure TLS 1.0/1.1 disabled.', }, { id: 'test-iso-3', code: 'A.5.24', name: 'Infosec Incident Management Plan', description: 'Annual test of incident response playbooks and SIEM real-time alerting integration.', category: 'Security Operations', frequency: 'Quarterly', status: 'Passing', statusVariant: 'success', artifact: 'incident-drill-simulation-2026.pdf', verified: true, lastTested: 'Aug 04, 2026', auditorNotes: 'Mean time to acknowledge (MTTA) under 3 minutes recorded during drill.', }, { id: 'test-iso-4', code: 'A.8.9', name: 'Configuration Management Validation', description: 'Infrastructure-as-Code Terraform state tracking and drift detection alerts.', category: 'DevOps & CI/CD', frequency: 'Daily', status: 'Passing', statusVariant: 'success', artifact: 'terraform-drift-scan-log.json', verified: true, lastTested: '1h ago', auditorNotes: '100% cloud resources provisioned strictly via verified CI pipelines.', }, { id: 'test-iso-5', code: 'A.6.3', name: 'Security Awareness & Training', description: 'Tracking employee onboarding training completion and phishing simulation resilience.', category: 'People & HR', frequency: 'Monthly', status: 'Passing', statusVariant: 'success', artifact: 'knowbe4-training-summary-q2.csv', verified: true, lastTested: 'Aug 18, 2026', auditorNotes: '98.4% staff passed quarterly spear-phishing test simulation.', }, { id: 'test-iso-6', code: 'A.5.19', name: 'Supplier Security Governance', description: 'Formal security evaluation and risk scoring for external vendors processing company data.', category: 'People & HR', frequency: 'Monthly', status: 'Needs Attention', statusVariant: 'warning', artifact: 'iso-vendor-evaluation-register.csv', verified: false, lastTested: '2 days ago', auditorNotes: 'Annual security questionnaire overdue for 2 low-risk sub-contractors.', }, ], trustCenterUrl: 'https://trust.uipkge.dev', }, hipaa: { id: 'hipaa', tabLabel: 'HIPAA Security Rule', name: 'HIPAA Security & Privacy Rule', badge: 'Healthcare & ePHI Protection', standard: '45 CFR Part 160 & Part 164 Subparts A, C, E', score: 98, readinessLabel: '98% Compliant', period: 'Active Assessment · 2026', auditor: 'Coalfire Systems · HIPAA Assessor', totalPassing: 42, totalTests: 43, pillars: [ { code: '164.308', title: 'Administrative Safeguards', description: 'Security management process, workforce clearance, and contingency operations.', score: 97, passed: 18, total: 18, status: '97% Passed · 18/18 tests', statusVariant: 'success', highlights: ['Emergency Mode Operations', 'Violation Sanction Policy'], iconType: 'shield', }, { code: '164.310', title: 'Physical Safeguards', description: 'Facility access controls, workstation security, and device media control.', score: 100, passed: 10, total: 10, status: '100% Passed · 10/10 tests', statusVariant: 'success', highlights: ['Encrypted SSD Storage Media', 'Biometric Facility Access'], iconType: 'lock', }, { code: '164.312', title: 'Technical Safeguards', description: 'ePHI encryption, unique user identification, and automated session timeout.', score: 96, passed: 12, total: 13, status: '96% Passed · 12/13 tests', statusVariant: 'warning', highlights: ['15-Minute Auto-Lock Policy', 'SHA-256 Audit Trail Integrity'], iconType: 'server', }, { code: '164.314', title: 'Organizational Requirements', description: 'Business Associate Agreements (BAAs) with all vendors handling ePHI.', score: 100, passed: 2, total: 2, status: '100% Passed · 2/2 BAAs', statusVariant: 'success', highlights: ['AWS HIPAA BAA Signed', 'Cloudflare HIPAA BAA Signed'], iconType: 'users', }, ], tests: [ { id: 'test-hipaa-1', code: '164.312(a)(1)', name: 'Unique User ePHI Access Identification', description: 'Every healthcare provider and system operator assigned a unique non-shared login.', category: 'Identity & Auth', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'hipaa-identity-access-log.json', verified: true, lastTested: '10m ago', auditorNotes: 'Zero generic or shared accounts found across electronic health records.', }, { id: 'test-hipaa-2', code: '164.312(a)(2)(iii)', name: 'Automatic Logoff Configuration', description: 'System automatically terminates an electronic session after 15 minutes of inactivity.', category: 'Cloud Infrastructure', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'session-timeout-policy-test.json', verified: true, lastTested: '22m ago', auditorNotes: 'Verified on web, desktop app, and clinician mobile portals.', }, { id: 'test-hipaa-3', code: '164.312(b)', name: 'Audit Controls & 6-Year Retention', description: 'Immutable audit logs recording access, modification, and export of electronic patient data.', category: 'Security Operations', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'audit-worm-retention-spec.json', verified: true, lastTested: '5m ago', auditorNotes: 'AWS S3 Object Lock in Compliance Mode active with 6-year retention policy.', }, { id: 'test-hipaa-4', code: '164.312(e)(1)', name: 'Transmission Security TLS 1.3', description: 'ePHI in transit encrypted across public networks using TLS 1.3 with HSTS enabled.', category: 'Cloud Infrastructure', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'tls-cipher-scan-report.json', verified: true, lastTested: '30m ago', auditorNotes: 'A+ SSL Labs score verified on all public API endpoints.', }, { id: 'test-hipaa-5', code: '164.314(a)(1)', name: 'Active BAAs for All Cloud Vendors', description: 'Executed Business Associate Agreements signed with all subprocessors with access to ePHI.', category: 'People & HR', frequency: 'Monthly', status: 'Passing', statusVariant: 'success', artifact: 'signed-baa-register-2026.pdf', verified: true, lastTested: 'Aug 15, 2026', auditorNotes: 'BAA signed with AWS, Twilio, SendGrid, and Datadog.', }, { id: 'test-hipaa-6', code: '164.308(a)(7)', name: 'Contingency & Disaster Recovery Plan', description: 'Documented emergency mode operations and annual disaster recovery failover drill.', category: 'Security Operations', frequency: 'Quarterly', status: 'Needs Attention', statusVariant: 'warning', artifact: 'dr-failover-drill-q2.pdf', verified: false, lastTested: '3 days ago', auditorNotes: 'Q3 secondary region failover drill scheduled for next Tuesday.', }, ], trustCenterUrl: 'https://trust.uipkge.dev', }, gdpr: { id: 'gdpr', tabLabel: 'GDPR', name: 'General Data Protection Regulation', badge: 'Data Privacy & Subject Rights', standard: 'Regulation (EU) 2016/679 · DPO Supervised', score: 95, readinessLabel: '95% Compliant', period: 'Annual Privacy Review · 2026', auditor: 'Internal DPO & Lead Data Authority', totalPassing: 32, totalTests: 34, pillars: [ { code: 'Art 25', title: 'Data Protection by Design', description: 'Pseudonymization, data minimization, and automated retention limits.', score: 94, passed: 9, total: 10, status: '94% Passed · 9/10 tests', statusVariant: 'success', highlights: ['Automated 90-Day PII Purge', 'Data Minimization Schemas'], iconType: 'shield', }, { code: 'Art 30', title: 'Records of Processing (RoPA)', description: 'Complete registry of personal data processing categories and legal purposes.', score: 100, passed: 8, total: 8, status: '100% Passed · 8/8 records', statusVariant: 'success', highlights: ['Dynamic RoPA Data Flow', 'Lawful Basis Cataloged'], iconType: 'file', }, { code: 'Art 32', title: 'Security of Processing', description: 'Technical safeguards, encryption, and regular vulnerability assessments.', score: 96, passed: 11, total: 11, status: '100% Passed · 11/11 tests', statusVariant: 'success', highlights: ['Field-Level PII Encryption', 'Zero-Trust Bastion Access'], iconType: 'lock', }, { code: 'Art 33/34', title: 'Breach Notification Protocol', description: '72-hour supervisory authority notification process and risk assessments.', score: 90, passed: 4, total: 5, status: '90% Passed · 4/5 tests', statusVariant: 'warning', highlights: ['72-Hour DPA Escalation SLA', 'Subject Notification Workflow'], iconType: 'activity', }, ], tests: [ { id: 'test-gdpr-1', code: 'Art 17', name: 'Right to Erasure / DSR Pipeline', description: 'Automated user data deletion across database tables and 3rd party integrations in < 30 days.', category: 'DevOps & CI/CD', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'dsr-erasure-orchestrator.json', verified: true, lastTested: '14m ago', auditorNotes: 'Mean time to complete erasure request: 4.2 hours.', }, { id: 'test-gdpr-2', code: 'Art 30', name: 'RoPA Inventory Live Synchronization', description: 'Data classification tags synced with schema catalog to ensure full records of processing coverage.', category: 'Identity & Auth', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'ropa-schema-mapping-v3.json', verified: true, lastTested: '6m ago', auditorNotes: '100% of PII data fields mapped to lawful basis.', }, { id: 'test-gdpr-3', code: 'Art 28', name: 'Data Processing Agreements (DPAs)', description: 'Standard Contractual Clauses (SCCs) and DPAs executed with all EU data processors.', category: 'People & HR', frequency: 'Monthly', status: 'Passing', statusVariant: 'success', artifact: 'dpa-register-eu-2026.pdf', verified: true, lastTested: 'Aug 10, 2026', auditorNotes: 'All sub-processors compliant with EU-US Data Privacy Framework.', }, { id: 'test-gdpr-4', code: 'Art 7', name: 'Cookie Consent & Preference CMP', description: 'Explicit opt-in banner blocking non-essential tracking prior to affirmative user consent.', category: 'Cloud Infrastructure', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'cmp-consent-telemetry.json', verified: true, lastTested: '1h ago', auditorNotes: 'Zero tracking cookies loaded prior to consent confirmation.', }, { id: 'test-gdpr-5', code: 'Art 32(1)(a)', name: 'PII Field-Level Encryption at Rest', description: 'Names, emails, and financial identifiers hashed or encrypted with AES-256 before storage.', category: 'Cloud Infrastructure', frequency: 'Continuous (1h)', status: 'Passing', statusVariant: 'success', artifact: 'field-encryption-audit.json', verified: true, lastTested: '25m ago', auditorNotes: 'KMS envelope encryption active on all customer records.', }, { id: 'test-gdpr-6', code: 'Art 33', name: '72-Hour Breach Notification Drill', description: 'Tabletop simulation testing supervisory authority DPA notification within statutory 72h window.', category: 'Security Operations', frequency: 'Quarterly', status: 'Needs Attention', statusVariant: 'warning', artifact: 'gdpr-breach-playbook-2026.pdf', verified: false, lastTested: '4 days ago', auditorNotes: 'DPO escalation contact list updated; tabletop review due in Q3.', }, ], trustCenterUrl: 'https://trust.uipkge.dev', }, } function getPillarIcon(iconType: string): React.ComponentType<{ className?: string }> { switch (iconType) { case 'key': return KeyRound case 'shield': return ShieldCheck case 'activity': return Zap case 'users': return Users case 'lock': return Lock case 'server': return Server case 'file': return FileText default: return Shield } } export function ComplianceSoc2Readiness({ defaultFramework = 'soc2', className, ...props }: ComplianceSoc2ReadinessProps) { const [activeFrameworkId, setActiveFrameworkId] = React.useState(defaultFramework) const [searchQuery, setSearchQuery] = React.useState('') const [selectedCategory, setSelectedCategory] = React.useState('all') const [runningTestIds, setRunningTestIds] = React.useState>({}) const [lastTestedMap, setLastTestedMap] = React.useState>({}) const [activeEvidenceModal, setActiveEvidenceModal] = React.useState(null) const [isTestingAll, setIsTestingAll] = React.useState(false) const [scheduleRequested, setScheduleRequested] = React.useState(false) const [exportSuccess, setExportSuccess] = React.useState(false) const currentFramework = frameworksData[activeFrameworkId] || frameworksData.soc2 const availableCategories = React.useMemo(() => { const cats = new Set() currentFramework.tests.forEach((t) => cats.add(t.category)) return ['all', ...Array.from(cats)] }, [currentFramework]) const filteredTests = React.useMemo(() => { const q = searchQuery.trim().toLowerCase() const cat = selectedCategory return currentFramework.tests.filter((test) => { const matchesCat = cat === 'all' || test.category === cat const matchesQuery = !q || test.code.toLowerCase().includes(q) || test.name.toLowerCase().includes(q) || test.description.toLowerCase().includes(q) || test.artifact.toLowerCase().includes(q) || test.category.toLowerCase().includes(q) return matchesCat && matchesQuery }) }, [currentFramework, searchQuery, selectedCategory]) function handleRunTest(testId: string) { setRunningTestIds((prev) => ({ ...prev, [testId]: true })) setTimeout(() => { setRunningTestIds((prev) => ({ ...prev, [testId]: false })) setLastTestedMap((prev) => ({ ...prev, [testId]: 'Just now' })) }, 500) } function handleRunAllTests() { setIsTestingAll(true) setTimeout(() => { setIsTestingAll(false) const updated: Record = {} currentFramework.tests.forEach((t) => { updated[t.id] = 'Just now' }) setLastTestedMap((prev) => ({ ...prev, ...updated })) }, 700) } function handleScheduleReview() { setScheduleRequested(true) setTimeout(() => { setScheduleRequested(false) }, 3000) } function handleExportPackage() { setExportSuccess(true) setTimeout(() => { setExportSuccess(false) }, 3000) } return (

{/* Framework Selector Tabs */}

SOC 2 Type II ISO 27001 HIPAA Security Rule GDPR

Real-time Telemetry Ingestion Active

{/* Executive Overview Card */}

{/* Left: Framework info */}

{currentFramework.name}

{currentFramework.badge}

{currentFramework.standard}

{currentFramework.period} Lead Assessor: {currentFramework.auditor}

{/* Right: Big Score Card & Action Buttons */}

{/* Score Badge */}

{currentFramework.score}% {currentFramework.readinessLabel.replace(`${currentFramework.score}% `, '')}

{currentFramework.totalPassing}/{currentFramework.totalTests} Continuous Controls Passing

{/* Action Buttons */}

{/* 4 Compliance Control Pillar Cards */}

{currentFramework.pillars.map((pillar) => { const IconComponent = getPillarIcon(pillar.iconType) return (

{pillar.code}

{pillar.score === 100 ? 'Zero Gaps' : pillar.statusVariant === 'warning' ? '1 Warning' : 'Passing'}

{pillar.title} {pillar.description}

{pillar.score}% {pillar.passed}/{pillar.total} tests

{/* Bullet highlights */}

{pillar.highlights.map((highlight) => (

{highlight}

))}

) })}

{/* Automated Evidence Tests Table Card */}

Automated Evidence Tests {filteredTests.length} Active

Continuous synthetic and policy compliance evaluation across infrastructure and IAM.

{/* Filter & Search Toolbar */}

setSearchQuery(e.target.value)} type="text" placeholder="Filter by control code, name, category, or evidence artifact..." className="border-border bg-background placeholder:text-muted-foreground focus-visible:ring-ring h-8 w-full rounded-md border px-3 pl-8 text-xs focus-visible:ring-2 focus-visible:outline-none" />

Category: {availableCategories.map((cat) => ( ))}

{/* Table Container */}

Control & Rule Name Domain Category Frequency Status Evidence Artifact Actions {filteredTests.map((test) => ( {/* Control Code & Name */}

{test.code} {test.name}

{test.description}

{/* Category */} {test.category} {/* Frequency */}

{test.frequency}

Tested: {lastTestedMap[test.id] || test.lastTested} {/* Status */} {test.status === 'Passing' ? ( ) : ( )} {test.status} {/* Evidence Artifact Link */} {/* Action Buttons */}

))} {filteredTests.length === 0 && (

No automated compliance tests match your query.

)}

{/* Auditor Access & Trust Center Preview Strip */}

Auditor Access & Public Trust Center

Vault Online

Cryptographically verifiable evidence room configured for continuous compliance review by{' '} {currentFramework.auditor}.

Access Grant: Valid for 14 days Trust Portal: {currentFramework.trustCenterUrl}

{/* Bottom Audit Ingestion Watermark */}

Ledger Stamp: 0x9b4a8e217f0a4421b8c1992019a · SHA-256 Verified

Framework: {currentFramework.tabLabel} · Last Evaluation: Just now

{/* Modal / Sheet Preview for Evidence Artifact */} {activeEvidenceModal && ( )}

) } 61:["$","div",null,{"className":"mt-3 flex min-h-0 min-w-0 flex-1 flex-col gap-3","children":[["$","div",null,{"className":"flex shrink-0 items-start gap-3","children":[["$","div",null,{"className":"flex max-h-28 min-w-0 flex-1 flex-wrap items-center gap-2 overflow-y-auto","children":[["$","ul",null,{"className":"flex min-w-0 flex-wrap gap-2","aria-label":"Package dependencies","children":[["$","li","lucide-react",{"className":"min-w-0 max-w-full","children":["$","a",null,{"href":"https://www.npmjs.com/package/lucide-react","target":"_blank","rel":"noopener noreferrer","className":"flex max-w-full min-w-0 items-center gap-1.5 rounded-md border px-2 py-1.5 text-xs","children":[["$","svg",null,{"viewBox":"0 0 24 24","className":"size-3 shrink-0","children":["$","path",null,{"d":"M1.763 0C.786 0 0 .786 0 1.763v20.474C0 23.214.786 24 1.763 24h20.474c.977 0 1.763-.786 1.763-1.763V1.763C24 .786 23.214 0 22.237 0zM5.13 5.323l13.837.019-.009 13.836h-3.464l.01-10.382h-3.456L12.04 19.17H5.113z","fill":"currentColor"}]}],["$","span",null,{"className":"min-w-0 break-all text-xs font-medium","children":"lucide-react"}]]}]}]]}],["$","$L62",null,{"namespace":"@registrydirectory","registryDependencies":["https://uipkge.dev/r/react/badge.json","https://uipkge.dev/r/react/button.json","https://uipkge.dev/r/react/card.json","https://uipkge.dev/r/react/progress.json","https://uipkge.dev/r/react/separator.json","https://uipkge.dev/r/react/table.json","https://uipkge.dev/r/react/tabs.json"]}]]}],null]}],["$","$L63",null,{"files":[{"path":"packages/registry-react/blocks/compliance-soc2-readiness/ComplianceSoc2Readiness.tsx","content":"$64","type":"registry:block","target":"~/components/blocks/ComplianceSoc2Readiness.tsx"}],"className":"h-[70svh] min-h-80"}]]}]