메뉴
SecOps engine — Sentinel ingest, incident lifecycle, FAIR trigger, SecOps UI. Use before incident API, SLA, or CISO dashboard changes. Write secops.contract.test.js first.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Data pillar — classification, DLP ingest (backlog). Use when adding Purview/ Macie-style signals or app-layer DLP. Write data.contract.test.js first.
Network pillar — segmentation, exposure scanning (backlog). Use when adding topology or port-exposure features. Write network.contract.test.js first.
Resilience engine — Git-to-cloud DR, RTO/RPO measurement. Use before recovery orchestrator or DR field changes. Write resilience.contract.test.js first.
Software supply chain pillar — CASB catalog, shadow IT, SBOM gating. Use before CASB ingest or app catalog changes. Write software.contract.test.js first.
Devices pillar — multi-cloud asset register, DR posture, incident binding. Use before asset sync, CASB correlation, or register UI changes. Write devices.contract.test.js first.
Identity pillar (JIT elevation, Break Glass, RBAC). Use before changing auth, privileged access, or break-glass flows. Write identity.contract.test.js first.
| name | pillar-secops |
| description | SecOps engine — Sentinel ingest, incident lifecycle, FAIR trigger, SecOps UI. Use before incident API, SLA, or CISO dashboard changes. Write secops.contract.test.js first. |
NIST: DE.CM, DE.AE, RS.MA, RS.AN
Status: Partial — ingest API delivered; correlation IR expanding
| Area | Paths |
|---|---|
| Ingest | services/governance-incident-ingest.js, api/governance-router.js |
| Lifecycle | services/governance-incident-lifecycle.js, sql/incident_lifecycle.sql |
| SLA | services/governance-sla.js |
| FAIR on ingest | services/fair-risk-engine.js |
| MITRE | services/mitre-enrichment.js |
| UI | app/secops-console/, app/components/dashboards/CISOExecutiveDashboard.js |
ict-governance-framework/tests/contracts/secops.contract.test.js
governance_incidents + governance_incident_ingest_log with correlation_idVALID_TRANSITIONSnpm run verify:secops
npm run verify:calibration