193 lines
4.8 KiB
JSON
193 lines
4.8 KiB
JSON
|
|
{
|
||
|
|
"resources": [
|
||
|
|
{
|
||
|
|
"id": "public-docs",
|
||
|
|
"name": "Public Documentation",
|
||
|
|
"classification": "public",
|
||
|
|
"environment": "production",
|
||
|
|
"resource_type": "Documentation",
|
||
|
|
"criticality": "low"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "internal-wiki",
|
||
|
|
"name": "Internal Company Wiki",
|
||
|
|
"classification": "internal",
|
||
|
|
"environment": "production",
|
||
|
|
"resource_type": "Documentation",
|
||
|
|
"criticality": "medium"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "sensitive-db",
|
||
|
|
"name": "Customer Database",
|
||
|
|
"classification": "sensitive",
|
||
|
|
"environment": "production",
|
||
|
|
"resource_type": "Database",
|
||
|
|
"criticality": "high",
|
||
|
|
"data_type": "pii",
|
||
|
|
"encryption": {
|
||
|
|
"at_rest": true,
|
||
|
|
"in_transit": true
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "financial-records",
|
||
|
|
"name": "Financial Records System",
|
||
|
|
"classification": "confidential",
|
||
|
|
"environment": "production",
|
||
|
|
"resource_type": "Database",
|
||
|
|
"criticality": "critical",
|
||
|
|
"data_type": "financial",
|
||
|
|
"jurisdiction": "US",
|
||
|
|
"requires_dual_control": true,
|
||
|
|
"sox_controlled": true
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "healthcare-data",
|
||
|
|
"name": "Patient Healthcare Records",
|
||
|
|
"classification": "secret",
|
||
|
|
"environment": "production",
|
||
|
|
"resource_type": "Database",
|
||
|
|
"criticality": "critical",
|
||
|
|
"data_type": "phi",
|
||
|
|
"jurisdiction": "US",
|
||
|
|
"hipaa_covered": true,
|
||
|
|
"requires_authorization": true
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "export-controlled-tech",
|
||
|
|
"name": "Export Controlled Technology",
|
||
|
|
"classification": "top_secret",
|
||
|
|
"environment": "production",
|
||
|
|
"resource_type": "Repository",
|
||
|
|
"criticality": "critical",
|
||
|
|
"export_controlled": true,
|
||
|
|
"restricted_countries": ["CN", "RU", "IR", "KP"],
|
||
|
|
"clearance_required": "secret"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "eu-customer-data",
|
||
|
|
"name": "EU Customer Personal Data",
|
||
|
|
"classification": "confidential",
|
||
|
|
"environment": "production",
|
||
|
|
"resource_type": "Database",
|
||
|
|
"criticality": "high",
|
||
|
|
"data_type": "personal_data",
|
||
|
|
"data_classification": "eu_personal_data",
|
||
|
|
"jurisdiction": "EU",
|
||
|
|
"gdpr_applicable": true,
|
||
|
|
"allowed_countries": ["GB", "DE", "FR", "IT", "ES", "NL"],
|
||
|
|
"data_purpose": ["service_delivery", "customer_support"]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "prod-server-01",
|
||
|
|
"name": "Production Web Server",
|
||
|
|
"classification": "internal",
|
||
|
|
"environment": "production",
|
||
|
|
"resource_type": "Server",
|
||
|
|
"criticality": "high",
|
||
|
|
"maintenance_category": "critical",
|
||
|
|
"geo_restricted": false
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "dev-environment",
|
||
|
|
"name": "Development Environment",
|
||
|
|
"classification": "internal",
|
||
|
|
"environment": "development",
|
||
|
|
"resource_type": "Environment",
|
||
|
|
"criticality": "medium"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "intellectual-property",
|
||
|
|
"name": "Company IP Repository",
|
||
|
|
"classification": "confidential",
|
||
|
|
"environment": "production",
|
||
|
|
"resource_type": "Repository",
|
||
|
|
"criticality": "critical",
|
||
|
|
"data_type": "intellectual_property",
|
||
|
|
"ip_classification": ["patents", "trade_secrets", "algorithms"]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"actions": [
|
||
|
|
{
|
||
|
|
"id": "read",
|
||
|
|
"name": "Read Access",
|
||
|
|
"category": "data",
|
||
|
|
"risk_level": "low"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "write",
|
||
|
|
"name": "Write Access",
|
||
|
|
"category": "data",
|
||
|
|
"risk_level": "medium"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "delete",
|
||
|
|
"name": "Delete Operation",
|
||
|
|
"category": "data",
|
||
|
|
"risk_level": "high"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "deploy",
|
||
|
|
"name": "Deploy Application",
|
||
|
|
"category": "system",
|
||
|
|
"risk_level": "high"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "maintenance",
|
||
|
|
"name": "System Maintenance",
|
||
|
|
"category": "system",
|
||
|
|
"risk_level": "medium"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "backup",
|
||
|
|
"name": "Data Backup",
|
||
|
|
"category": "data",
|
||
|
|
"risk_level": "low"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "restore",
|
||
|
|
"name": "Data Restore",
|
||
|
|
"category": "data",
|
||
|
|
"risk_level": "high"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "export",
|
||
|
|
"name": "Data Export",
|
||
|
|
"category": "data",
|
||
|
|
"risk_level": "high"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "access",
|
||
|
|
"name": "General Access",
|
||
|
|
"category": "system",
|
||
|
|
"risk_level": "low"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "modify",
|
||
|
|
"name": "Modify Resource",
|
||
|
|
"category": "system",
|
||
|
|
"risk_level": "medium"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"environments": [
|
||
|
|
{
|
||
|
|
"name": "development",
|
||
|
|
"security_level": "standard",
|
||
|
|
"requires_approval": false,
|
||
|
|
"audit_level": "basic"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"name": "staging",
|
||
|
|
"security_level": "enhanced",
|
||
|
|
"requires_approval": false,
|
||
|
|
"audit_level": "detailed"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"name": "production",
|
||
|
|
"security_level": "maximum",
|
||
|
|
"requires_approval": true,
|
||
|
|
"audit_level": "comprehensive",
|
||
|
|
"change_control": true
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|