From a35b656cf3089374a98abb907ce33c6e5f0ac749 Mon Sep 17 00:00:00 2001 From: Jez Caudle Date: Tue, 21 Feb 2023 06:02:08 +0000 Subject: [PATCH] caf_text now working redirects working for company now - although the overall structure is not clear in the app or in my mind --- app/controllers/cafs_controller.rb | 2 +- app/views/cafs/show.html.erb | 8 +++----- app/views/home/index.html.erb | 4 ++-- config/caf_text.yml | 6 +++--- 4 files changed, 9 insertions(+), 11 deletions(-) diff --git a/app/controllers/cafs_controller.rb b/app/controllers/cafs_controller.rb index 52d154c..3dde73d 100644 --- a/app/controllers/cafs_controller.rb +++ b/app/controllers/cafs_controller.rb @@ -26,7 +26,7 @@ class CafsController < ApplicationController respond_to do |format| if @caf.save - format.html { redirect_to caf_url(@caf), notice: "Caf was successfully created." } + format.html { redirect_to company_caf_url(@caf.company_id,@caf.id), notice: "Caf was successfully created." } format.json { render :show, status: :created, location: @caf } else format.html { render :new, status: :unprocessable_entity } diff --git a/app/views/cafs/show.html.erb b/app/views/cafs/show.html.erb index a23ddfb..1a9f95f 100644 --- a/app/views/cafs/show.html.erb +++ b/app/views/cafs/show.html.erb @@ -1,10 +1,8 @@ -

<%= notice %>

- <%= render @caf %>
- <%= link_to "Edit this caf", edit_caf_path(@caf) %> | - <%= link_to "Back to cafs", cafs_path %> + <%= link_to "Edit this caf", edit_company_caf_path(@caf.company_id,@caf.id) %> | + <%= link_to "Back to cafs", company_cafs_path(@caf.company_id) %> - <%= button_to "Destroy this caf", @caf, method: :delete %> + <%= button_to "Destroy this caf", company_caf_path(@caf.id), method: :delete %>
diff --git a/app/views/home/index.html.erb b/app/views/home/index.html.erb index 6f9bc41..88cfba5 100644 --- a/app/views/home/index.html.erb +++ b/app/views/home/index.html.erb @@ -1,8 +1,8 @@ -

CAF Compliance Tracking

+

Cyber Awareness Framework

+

Compliance Tracking

<% if !user_signed_in? %> Not Signed in. - <% else %> <%#= current_user.roletxt %> <% if current_user.admin? %> diff --git a/config/caf_text.yml b/config/caf_text.yml index 89cd731..587cc86 100644 --- a/config/caf_text.yml +++ b/config/caf_text.yml @@ -67,7 +67,7 @@ objectives: - Risk management decision-making is delegated and escalated where necessary, across the organisation, to people who have the skills, knowledge, tools, and authority they need. - Risk management decisions are periodically reviewed to ensure their continued relevance and validity. - principle: - name: A2 Risk Management + name: A2 Risk Management description: The organisation takes appropriate steps to identify, assess and understand security risks to the network and information systems supporting the operation of essential functions. This includes an overall organisational approach to risk management. sub-principles: - sub-principle: @@ -91,10 +91,10 @@ objectives: condition: All subprincipleitem: - Your organisational process ensures that security risks to networks and information systems relevant to essential functions are identified, analysed, prioritised, and managed. - - Your risk assessments are informed by an understanding of the vulnerabilities in the networks and information systems supporting your essential function. + - Your risk assessments are informed by an understanding of the vulnerabilities in the networks and info

<%= notice %>

rmation systems supporting your essential function. - The output from your risk management process is a clear set of security requirements that will address the risks in line with your organisational approach to security. - Significant conclusions reached in the course of your risk management process are communicated to key security decision-makers and accountable individuals. - - You conduct risk assessments when significant events potentially affect the essential function, such as replacing a system or a change in the cyber security threat. + - You conduct risk assessments when significant events potentially affect the essential function, such as replacing a system or a change in the cybe

<%= notice %>

r security threat. - You perform threat analysis and understand how generic threats apply to your organisation. - subprincipleitemgroup: kind: Achieved