Menu
Network pillar — segmentation, exposure scanning (backlog). Use when adding topology or port-exposure features. Write network.contract.test.js first.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
| name | pillar-network |
| description | Network pillar — segmentation, exposure scanning (backlog). Use when adding topology or port-exposure features. Write network.contract.test.js first. |
NIST: PR.PS
Status: Backlog — docs / IaC only today
| Area | Paths |
|---|---|
| IaC blueprints | blueprint-templates/infrastructure-blueprints/ |
| Future monitor | TBD — services/network-posture.js (not created) |
ict-governance-framework/tests/contracts/network.contract.test.js
None yet — define npm run verify:network when first service lands.
POST /api/governance/incidentsData pillar — classification, DLP ingest (backlog). Use when adding Purview/ Macie-style signals or app-layer DLP. Write data.contract.test.js first.
Resilience engine — Git-to-cloud DR, RTO/RPO measurement. Use before recovery orchestrator or DR field changes. Write resilience.contract.test.js first.
Software supply chain pillar — CASB catalog, shadow IT, SBOM gating. Use before CASB ingest or app catalog changes. Write software.contract.test.js first.
SecOps engine — Sentinel ingest, incident lifecycle, FAIR trigger, SecOps UI. Use before incident API, SLA, or CISO dashboard changes. Write secops.contract.test.js first.
Devices pillar — multi-cloud asset register, DR posture, incident binding. Use before asset sync, CASB correlation, or register UI changes. Write devices.contract.test.js first.
Identity pillar (JIT elevation, Break Glass, RBAC). Use before changing auth, privileged access, or break-glass flows. Write identity.contract.test.js first.