Fixing paths

Adding more Caf to the YAML
Test for the YAML to make sure it is valid YAML

app/views/cafs/_caf.html.erb

@@ -27,7 +27,7 @@
           <% subprinciple.subprincipleitemgroups.each do |subprincipleitemgroup| %>
             <td>
             <% subprincipleitemgroup.subprincipleitems.each do |subprincipleitem| %>
-              <div style="background-color:<%= subprincipleitem.affirmative ? '#05aa05' : '#aa3030'  %>;" id="<%= "subprincipleitemid_#{subprincipleitem.id}" %>" class="subprincipleitem"><%= subprincipleitem.description %><%= link_to "Change", edit_subprincipleitem_path(subprincipleitem) %>
+              <div style="background-color:<%= subprincipleitem.affirmative ? '#05aa05' : '#aa3030'  %>;" id="<%= "subprincipleitemid_#{subprincipleitem.id}" %>" class="subprincipleitem"><%= subprincipleitem.description %><%= link_to "Change", edit_caf_subprincipleitem_path(subprincipleitem) %>
               </div>
 
             <% end %>

config/caf_text.yml

@@ -91,10 +91,10 @@ objectives:
                                  condition: All
                                  subprincipleitem:
                                  - Your organisational process ensures that security risks to networks and information systems relevant to essential functions are identified, analysed, prioritised, and managed.
-                                - Your risk assessments are informed by an understanding of the vulnerabilities in the networks and info<p style="color: green"><%= notice %></p>rmation systems supporting your essential function.
+                                 - Your risk assessments are informed by an understanding of the vulnerabilities in the network and information systems supporting your essential function(s).
                                  - The output from your risk management process is a clear set of security requirements that will address the risks in line with your organisational approach to security.
                                  - Significant conclusions reached in the course of your risk management process are communicated to key security decision-makers and accountable individuals.
-                                - You conduct risk assessments when significant events potentially affect the essential function, such as replacing a system or a change in the cybe<p style="color: green"><%= notice %></p>r security threat.
+                                 - You conduct risk assessments when significant events potentially affect the essential function(s), such as replacing a system or a change in the cyber security threat.
                                  - You perform threat analysis and understand how generic threats apply to your organisation.
                              - subprincipleitemgroup:
                                  kind: Achieved
@@ -181,7 +181,7 @@ objectives:
                                     - You are aware of all third-party connections and have assurance that they meet your organisation’s security requirements.
                                     - Your approach to security incident management considers incidents that might arise in your supply chain.
                                     - You have confidence that information shared with suppliers that is necessary for the operation of your essential function(s) is appropriately protected from well-known attacks and known vulnerabilities.
-                        -subprincipleitemgroup:
+                            - subprincipleitemgroup:
                                 kind: Achieved
                                 condition: All
                                 subprincipleitem:
@@ -291,7 +291,7 @@ objectives:
                                     - You have taken appropriate steps to mitigate any risks identified.
                                     - The act of connecting to a network port or cable does not grant access to any systems.
                                     - You are able to detect unknown devices being connected to your network and information systems and investigate such incidents.
-                        -subprincipleitemgroup:
+                            - subprincipleitemgroup:
                                 kind: Achieved
                                 condition: All
                                 subprincipleitem:
@@ -333,7 +333,7 @@ objectives:
                     - sub-principle:
                         name: B2.d Identity and Access Management (IdAM)
                         description: You closely manage and maintain identity and access control for users, devices and systems accessing the network and information systems supporting your  essential function(s).
-                    subprincipleitemgroup:
+                        subprincipleitemgroups:
                             - subprincipleitemgroup:
                                 kind: Not
                                 condition: At least one

config/routes.rb

@@ -6,6 +6,9 @@ Rails.application.routes.draw do
       resources :cafs
   end
 
+  # edit_caf_subprincipleitem GET    /cafs/:caf_id/subprincipleitems/:id/edit(.:format)
+  # caf_subprincipleitem PATCH  /cafs/:caf_id/subprincipleitems/:id(.:format)
+
   resources 'cafs', only: [:show] do
     resources :subprincipleitems, only: [:edit, :update]
   end

test/models/caf_test.rb

@@ -1,4 +1,5 @@
 require "test_helper"
+require 'yaml'
 
 class CafTest < ActiveSupport::TestCase
   test "name_unique_per_company" do
@@ -11,4 +12,8 @@ class CafTest < ActiveSupport::TestCase
      c = Caf.new
      assert !c.save
    end
+
+   test "yaml file is valid" do
+     ymal = YAML.load_file('config/caf_text.yml')
+   end
 end