소스 정보
- 저장소
- Hack23/riksdagsmonitor
- 최근 소스 활동
- 2026년 4월 16일 09:31
- 감지된 SKILL.md 언어
- 영어
- 스타
- 13
- 포크
- 3
설치 방법
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
소스 파일 검토
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
SKILL.md 표시 중
SKILL.md
소스 지침 · 읽기 전용 미리보기- name
- nist-csf-mapping
- description
- NIST Cybersecurity Framework 2.0 mapping for static HTML/CSS websites
- license
- Apache-2.0
# NIST CSF 2.0 Mapping (Static Site)
## 🔴 AI FIRST Quality Principle
> **Apply the AI FIRST principle: never accept first-pass quality. Minimum 2 iterations. Read all output, improve every section. No shortcuts.**
## Purpose
Map Riksdagsmonitor security controls to NIST Cybersecurity Framework 2.0 functions.
## Core Functions
### IDENTIFY (ID)
**ID.AM - Asset Management**
- Repository: Hack23/riksdagsmonitor
- Domain: riksdagsmonitor.com
- Hosting: GitHub Pages CDN
- Content: 14 HTML files, CSS, images
**ID.RA - Risk Assessment**
- Annual threat modeling (STRIDE)
- Dependency vulnerability scanning
- Security header audits
**ID.GV - Governance**
- ISMS policies (Hack23 ISMS-PUBLIC)
- Secure Development Policy
- Access control procedures
### PROTECT (PR)
**PR.AC - Access Control**
- GitHub MFA required
- Branch protection enabled
- Required PR reviews
**PR.DS - Data Security**
- HTTPS-only (TLS 1.3)
- No cookies/tracking
- Public data classification
**PR.IP - Protective Technology**
- Security headers (CSP, HSTS, X-Frame-Options)
- Dependabot scanning
- Secret scanning enabled
### DETECT (DE)
**DE.CM - Monitoring**
- GitHub audit logs
- Dependabot alerts
- CodeQL scanning
**DE.AE - Adverse Events**
- Security advisory monitoring
- Failed workflow notifications
- Deployment monitoring
### RESPOND (RS)
**RS.AN - Analysis**
- Incident classification (CRITICAL/HIGH/MEDIUM/LOW)
- Root cause analysis
- Security advisory review
**RS.MI - Mitigation**
- Rollback via git revert
- PR closure for vulnerabilities
- Emergency deployment procedures
### RECOVER (RC)
**RC.RP - Recovery Planning**
- Git version history (complete backup)
- Repository mirroring
- Deployment rollback
**RC.CO - Communications**
- Security contact: security@hack23.com
- Status updates via GitHub
- Post-incident reports
## Implementation Checklist
- ✅ Asset inventory (ID.AM)
- ✅ Access controls (PR.AC)
- ✅ Monitoring enabled (DE.CM)
- ✅ Incident procedures (RS)
- ✅ Recovery plan (RC)
## References
- **NIST CSF 2.0**: https://www.nist.gov/cyberframework
- **SECURITY_ARCHITECTURE.md**: Security controls
GitHub에서 보기