{ "$schema": "https://ui.shadcn.com/schema/registry-item.json", "name": "compliance-soc2-readiness", "title": "Compliance Soc2 Readiness", "type": "registry:block", "files": [ { "path": "packages/registry-react/blocks/compliance-soc2-readiness/ComplianceSoc2Readiness.tsx", "content": "'use client'\n\nimport * as React from 'react'\nimport {\n AlertCircle,\n AlertTriangle,\n ArrowUpRight,\n BadgeCheck,\n Calendar,\n Check,\n CheckCircle2,\n Clock,\n Download,\n Eye,\n FileDown,\n FileText,\n Filter,\n KeyRound,\n Lock,\n RefreshCw,\n Search,\n Server,\n Shield,\n ShieldCheck,\n Users,\n X,\n Zap,\n} from 'lucide-react'\nimport { cn } from '@/lib/utils'\nimport { Badge } from '@/components/ui/badge'\nimport { Button } from '@/components/ui/button'\nimport { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'\nimport { Progress } from '@/components/ui/progress'\nimport { Separator } from '@/components/ui/separator'\nimport { Table, TableBody, TableCell, TableHead, TableHeader, TableRow } from '@/components/ui/table'\nimport { Tabs, TabsList, TabsTrigger } from '@/components/ui/tabs'\n\nexport interface PillarData {\n code: string\n title: string\n description: string\n score: number\n passed: number\n total: number\n status: string\n statusVariant: 'success' | 'warning' | 'secondary'\n highlights: string[]\n iconType: 'key' | 'shield' | 'activity' | 'users' | 'lock' | 'server' | 'file'\n}\n\nexport interface EvidenceTestItem {\n id: string\n code: string\n name: string\n description: string\n category: 'Identity & Auth' | 'Cloud Infrastructure' | 'Security Operations' | 'DevOps & CI/CD' | 'People & HR'\n frequency: 'Continuous (1h)' | 'Daily' | 'Monthly' | 'Quarterly'\n status: 'Passing' | 'Needs Attention'\n statusVariant: 'success' | 'warning'\n artifact: string\n verified: boolean\n lastTested: string\n auditorNotes: string\n}\n\nexport interface FrameworkConfig {\n id: string\n tabLabel: string\n name: string\n badge: string\n standard: string\n score: number\n readinessLabel: string\n period: string\n auditor: string\n totalPassing: number\n totalTests: number\n pillars: PillarData[]\n tests: EvidenceTestItem[]\n trustCenterUrl: string\n}\n\nexport interface ComplianceSoc2ReadinessProps extends React.HTMLAttributes {\n defaultFramework?: string\n}\n\nconst frameworksData: Record = {\n soc2: {\n id: 'soc2',\n tabLabel: 'SOC 2 Type II',\n name: 'SOC 2 Type II Readiness',\n badge: 'Security & Confidentiality',\n standard: 'AICPA Trust Services Criteria (CC1–CC9)',\n score: 96,\n readinessLabel: '96% Audit Ready',\n period: 'Jan 1, 2026 – Dec 31, 2026',\n auditor: 'KPMG LLP · Sarah Jenkins, CPA/CISA',\n totalPassing: 69,\n totalTests: 71,\n pillars: [\n {\n code: 'CC1',\n title: 'Access Control & IAM',\n description: 'Identity federation, MFA enforcement, and least-privilege role provisioning.',\n score: 100,\n passed: 24,\n total: 24,\n status: '100% Passed · 24/24 tests',\n statusVariant: 'success',\n highlights: ['FIDO2/WebAuthn Hardware MFA', 'Just-In-Time Role Elevation'],\n iconType: 'key',\n },\n {\n code: 'CC2',\n title: 'Encryption & Key Management',\n description: 'Data encryption in-transit & at rest with automated CMK key rotation.',\n score: 98,\n passed: 18,\n total: 18,\n status: '98% Passed · 18/18 tests',\n statusVariant: 'success',\n highlights: ['AWS KMS Envelope CMKs', 'TLS 1.3 Strict Cipher Suites'],\n iconType: 'shield',\n },\n {\n code: 'CC3',\n title: 'Incident Response & Logging',\n description: 'Immutable audit trail ingesters, P1 runbooks, and real-time SIEM alerts.',\n score: 94,\n passed: 15,\n total: 16,\n status: '94% Passed · 15/16 tests',\n statusVariant: 'warning',\n highlights: ['Immutable WORM S3 Bucket', 'Quarterly Drill Executed'],\n iconType: 'activity',\n },\n {\n code: 'CC4',\n title: 'Employee Security & Vendor Risk',\n description: 'Background checks, awareness training, and third-party vendor DPA reviews.',\n score: 92,\n passed: 12,\n total: 13,\n status: '92% Passed · 12/13 tests',\n statusVariant: 'secondary',\n highlights: ['100% Staff Security Training', 'Tier 1 Vendor DPA Signed'],\n iconType: 'users',\n },\n ],\n tests: [\n {\n id: 'test-soc2-1',\n code: 'CC6.1',\n name: 'MFA Enforced for All Staff',\n description: 'Continuous sync with Okta IAM confirming hardware/TOTP MFA active on all active seats.',\n category: 'Identity & Auth',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'okta-mfa-sync-v2.json',\n verified: true,\n lastTested: '4m ago',\n auditorNotes: '100% of 248 accounts verified with WebAuthn/FIDO2 hardware key enforcement.',\n },\n {\n id: 'test-soc2-2',\n code: 'CC6.6',\n name: 'DB Storage Encrypted with KMS',\n description: 'All production RDS PostgreSQL and Redis storage volumes encrypted at rest with AWS KMS.',\n category: 'Cloud Infrastructure',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'aws-kms-rds-audit-prod.json',\n verified: true,\n lastTested: '12m ago',\n auditorNotes: 'AES-256 GCM encryption validated across primary cluster and 4 replica volumes.',\n },\n {\n id: 'test-soc2-3',\n code: 'CC7.2',\n name: 'Quarterly Penetration Test Completed',\n description: 'Independent gray-box network and web application penetration test with zero open criticals.',\n category: 'Security Operations',\n frequency: 'Quarterly',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'BishopFox-Pentest-Q2-2026.pdf',\n verified: true,\n lastTested: 'Aug 12, 2026',\n auditorNotes: 'Full remediation verified within 14-day SLA. Attestation signed by Bishop Fox.',\n },\n {\n id: 'test-soc2-4',\n code: 'CC6.7',\n name: 'Automated Backup Verification Daily',\n description: 'Daily point-in-time cross-region database snapshot validation and SHA-256 checksum test.',\n category: 'Cloud Infrastructure',\n frequency: 'Daily',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 's3-replica-checksum-20260821.log',\n verified: true,\n lastTested: '2h ago',\n auditorNotes: 'Automated restore drill executed with RPO < 5m and RTO < 15m.',\n },\n {\n id: 'test-soc2-5',\n code: 'CC8.1',\n name: 'Branch Protection & PR Reviews Enforced',\n description: 'GitHub repository rulesets require min 2 peer reviews, signed commits, and passing CI.',\n category: 'DevOps & CI/CD',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'github-branch-policy-main.json',\n verified: true,\n lastTested: '18m ago',\n auditorNotes: 'Zero bypass permissions granted. Administrator force-push strictly disabled.',\n },\n {\n id: 'test-soc2-6',\n code: 'CC9.2',\n name: 'Third-Party Vendor Risk Assessment',\n description: 'Annual SOC 2 Type II report collection and DPA compliance review for active SaaS vendors.',\n category: 'People & HR',\n frequency: 'Monthly',\n status: 'Needs Attention',\n statusVariant: 'warning',\n artifact: 'vendor-risk-matrix-2026.csv',\n verified: false,\n lastTested: 'Yesterday',\n auditorNotes: '1 vendor report renewal pending (Datadog EU renewal contract awaiting counter-signature).',\n },\n ],\n trustCenterUrl: 'https://trust.uipkge.dev',\n },\n iso27001: {\n id: 'iso27001',\n tabLabel: 'ISO 27001',\n name: 'ISO/IEC 27001:2022 ISMS',\n badge: 'Information Security Management',\n standard: 'Annex A Controls (A.5 – A.8) · Stage 2 Ready',\n score: 94,\n readinessLabel: '94% Stage 2 Ready',\n period: 'Audit Cycle 2026–2027',\n auditor: 'BSI Group · Henrik Lindqvist, Lead Auditor',\n totalPassing: 88,\n totalTests: 93,\n pillars: [\n {\n code: 'A.5',\n title: 'Organizational Controls',\n description: 'Information security policies, supplier governance, and asset inventories.',\n score: 96,\n passed: 35,\n total: 37,\n status: '96% Passed · 35/37 controls',\n statusVariant: 'success',\n highlights: ['Approved Security Policies', 'Supplier Risk Classification'],\n iconType: 'shield',\n },\n {\n code: 'A.6',\n title: 'People Controls',\n description: 'Screening, remote work guidelines, and continuous infosec education.',\n score: 92,\n passed: 8,\n total: 8,\n status: '92% Passed · 8/8 controls',\n statusVariant: 'success',\n highlights: ['Annual Training Certification', 'Formal Disciplinary Rules'],\n iconType: 'users',\n },\n {\n code: 'A.7',\n title: 'Physical Controls',\n description: 'Physical security perimeters, clear desk, and device screen lock policies.',\n score: 100,\n passed: 14,\n total: 14,\n status: '100% Passed · 14/14 controls',\n statusVariant: 'success',\n highlights: ['Zero Trust Cloud Infrastructure', 'Automated Screen Locking'],\n iconType: 'lock',\n },\n {\n code: 'A.8',\n title: 'Technological Controls',\n description: 'Endpoint protection, access rights, network security, and vulnerability management.',\n score: 93,\n passed: 31,\n total: 34,\n status: '93% Passed · 31/34 controls',\n statusVariant: 'warning',\n highlights: ['EDR on 100% Managed Laptops', 'Zero Trust Network Architecture'],\n iconType: 'server',\n },\n ],\n tests: [\n {\n id: 'test-iso-1',\n code: 'A.8.2',\n name: 'Privileged Access Rights Review',\n description: 'Quarterly review and revocation of administrative privileges on AWS and cloud IdPs.',\n category: 'Identity & Auth',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'iam-privileged-access-matrix.json',\n verified: true,\n lastTested: '8m ago',\n auditorNotes: 'All root credentials locked behind hardware token in safe storage.',\n },\n {\n id: 'test-iso-2',\n code: 'A.8.24',\n name: 'Use of Cryptography & Key Management',\n description: 'Enforcement of cryptographic standard policies for data in transit and at rest.',\n category: 'Cloud Infrastructure',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'crypto-policy-attestation.json',\n verified: true,\n lastTested: '15m ago',\n auditorNotes: 'TLS 1.3 enforced globally. Insecure TLS 1.0/1.1 disabled.',\n },\n {\n id: 'test-iso-3',\n code: 'A.5.24',\n name: 'Infosec Incident Management Plan',\n description: 'Annual test of incident response playbooks and SIEM real-time alerting integration.',\n category: 'Security Operations',\n frequency: 'Quarterly',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'incident-drill-simulation-2026.pdf',\n verified: true,\n lastTested: 'Aug 04, 2026',\n auditorNotes: 'Mean time to acknowledge (MTTA) under 3 minutes recorded during drill.',\n },\n {\n id: 'test-iso-4',\n code: 'A.8.9',\n name: 'Configuration Management Validation',\n description: 'Infrastructure-as-Code Terraform state tracking and drift detection alerts.',\n category: 'DevOps & CI/CD',\n frequency: 'Daily',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'terraform-drift-scan-log.json',\n verified: true,\n lastTested: '1h ago',\n auditorNotes: '100% cloud resources provisioned strictly via verified CI pipelines.',\n },\n {\n id: 'test-iso-5',\n code: 'A.6.3',\n name: 'Security Awareness & Training',\n description: 'Tracking employee onboarding training completion and phishing simulation resilience.',\n category: 'People & HR',\n frequency: 'Monthly',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'knowbe4-training-summary-q2.csv',\n verified: true,\n lastTested: 'Aug 18, 2026',\n auditorNotes: '98.4% staff passed quarterly spear-phishing test simulation.',\n },\n {\n id: 'test-iso-6',\n code: 'A.5.19',\n name: 'Supplier Security Governance',\n description: 'Formal security evaluation and risk scoring for external vendors processing company data.',\n category: 'People & HR',\n frequency: 'Monthly',\n status: 'Needs Attention',\n statusVariant: 'warning',\n artifact: 'iso-vendor-evaluation-register.csv',\n verified: false,\n lastTested: '2 days ago',\n auditorNotes: 'Annual security questionnaire overdue for 2 low-risk sub-contractors.',\n },\n ],\n trustCenterUrl: 'https://trust.uipkge.dev',\n },\n hipaa: {\n id: 'hipaa',\n tabLabel: 'HIPAA Security Rule',\n name: 'HIPAA Security & Privacy Rule',\n badge: 'Healthcare & ePHI Protection',\n standard: '45 CFR Part 160 & Part 164 Subparts A, C, E',\n score: 98,\n readinessLabel: '98% Compliant',\n period: 'Active Assessment · 2026',\n auditor: 'Coalfire Systems · HIPAA Assessor',\n totalPassing: 42,\n totalTests: 43,\n pillars: [\n {\n code: '164.308',\n title: 'Administrative Safeguards',\n description: 'Security management process, workforce clearance, and contingency operations.',\n score: 97,\n passed: 18,\n total: 18,\n status: '97% Passed · 18/18 tests',\n statusVariant: 'success',\n highlights: ['Emergency Mode Operations', 'Violation Sanction Policy'],\n iconType: 'shield',\n },\n {\n code: '164.310',\n title: 'Physical Safeguards',\n description: 'Facility access controls, workstation security, and device media control.',\n score: 100,\n passed: 10,\n total: 10,\n status: '100% Passed · 10/10 tests',\n statusVariant: 'success',\n highlights: ['Encrypted SSD Storage Media', 'Biometric Facility Access'],\n iconType: 'lock',\n },\n {\n code: '164.312',\n title: 'Technical Safeguards',\n description: 'ePHI encryption, unique user identification, and automated session timeout.',\n score: 96,\n passed: 12,\n total: 13,\n status: '96% Passed · 12/13 tests',\n statusVariant: 'warning',\n highlights: ['15-Minute Auto-Lock Policy', 'SHA-256 Audit Trail Integrity'],\n iconType: 'server',\n },\n {\n code: '164.314',\n title: 'Organizational Requirements',\n description: 'Business Associate Agreements (BAAs) with all vendors handling ePHI.',\n score: 100,\n passed: 2,\n total: 2,\n status: '100% Passed · 2/2 BAAs',\n statusVariant: 'success',\n highlights: ['AWS HIPAA BAA Signed', 'Cloudflare HIPAA BAA Signed'],\n iconType: 'users',\n },\n ],\n tests: [\n {\n id: 'test-hipaa-1',\n code: '164.312(a)(1)',\n name: 'Unique User ePHI Access Identification',\n description: 'Every healthcare provider and system operator assigned a unique non-shared login.',\n category: 'Identity & Auth',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'hipaa-identity-access-log.json',\n verified: true,\n lastTested: '10m ago',\n auditorNotes: 'Zero generic or shared accounts found across electronic health records.',\n },\n {\n id: 'test-hipaa-2',\n code: '164.312(a)(2)(iii)',\n name: 'Automatic Logoff Configuration',\n description: 'System automatically terminates an electronic session after 15 minutes of inactivity.',\n category: 'Cloud Infrastructure',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'session-timeout-policy-test.json',\n verified: true,\n lastTested: '22m ago',\n auditorNotes: 'Verified on web, desktop app, and clinician mobile portals.',\n },\n {\n id: 'test-hipaa-3',\n code: '164.312(b)',\n name: 'Audit Controls & 6-Year Retention',\n description: 'Immutable audit logs recording access, modification, and export of electronic patient data.',\n category: 'Security Operations',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'audit-worm-retention-spec.json',\n verified: true,\n lastTested: '5m ago',\n auditorNotes: 'AWS S3 Object Lock in Compliance Mode active with 6-year retention policy.',\n },\n {\n id: 'test-hipaa-4',\n code: '164.312(e)(1)',\n name: 'Transmission Security TLS 1.3',\n description: 'ePHI in transit encrypted across public networks using TLS 1.3 with HSTS enabled.',\n category: 'Cloud Infrastructure',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'tls-cipher-scan-report.json',\n verified: true,\n lastTested: '30m ago',\n auditorNotes: 'A+ SSL Labs score verified on all public API endpoints.',\n },\n {\n id: 'test-hipaa-5',\n code: '164.314(a)(1)',\n name: 'Active BAAs for All Cloud Vendors',\n description: 'Executed Business Associate Agreements signed with all subprocessors with access to ePHI.',\n category: 'People & HR',\n frequency: 'Monthly',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'signed-baa-register-2026.pdf',\n verified: true,\n lastTested: 'Aug 15, 2026',\n auditorNotes: 'BAA signed with AWS, Twilio, SendGrid, and Datadog.',\n },\n {\n id: 'test-hipaa-6',\n code: '164.308(a)(7)',\n name: 'Contingency & Disaster Recovery Plan',\n description: 'Documented emergency mode operations and annual disaster recovery failover drill.',\n category: 'Security Operations',\n frequency: 'Quarterly',\n status: 'Needs Attention',\n statusVariant: 'warning',\n artifact: 'dr-failover-drill-q2.pdf',\n verified: false,\n lastTested: '3 days ago',\n auditorNotes: 'Q3 secondary region failover drill scheduled for next Tuesday.',\n },\n ],\n trustCenterUrl: 'https://trust.uipkge.dev',\n },\n gdpr: {\n id: 'gdpr',\n tabLabel: 'GDPR',\n name: 'General Data Protection Regulation',\n badge: 'Data Privacy & Subject Rights',\n standard: 'Regulation (EU) 2016/679 · DPO Supervised',\n score: 95,\n readinessLabel: '95% Compliant',\n period: 'Annual Privacy Review · 2026',\n auditor: 'Internal DPO & Lead Data Authority',\n totalPassing: 32,\n totalTests: 34,\n pillars: [\n {\n code: 'Art 25',\n title: 'Data Protection by Design',\n description: 'Pseudonymization, data minimization, and automated retention limits.',\n score: 94,\n passed: 9,\n total: 10,\n status: '94% Passed · 9/10 tests',\n statusVariant: 'success',\n highlights: ['Automated 90-Day PII Purge', 'Data Minimization Schemas'],\n iconType: 'shield',\n },\n {\n code: 'Art 30',\n title: 'Records of Processing (RoPA)',\n description: 'Complete registry of personal data processing categories and legal purposes.',\n score: 100,\n passed: 8,\n total: 8,\n status: '100% Passed · 8/8 records',\n statusVariant: 'success',\n highlights: ['Dynamic RoPA Data Flow', 'Lawful Basis Cataloged'],\n iconType: 'file',\n },\n {\n code: 'Art 32',\n title: 'Security of Processing',\n description: 'Technical safeguards, encryption, and regular vulnerability assessments.',\n score: 96,\n passed: 11,\n total: 11,\n status: '100% Passed · 11/11 tests',\n statusVariant: 'success',\n highlights: ['Field-Level PII Encryption', 'Zero-Trust Bastion Access'],\n iconType: 'lock',\n },\n {\n code: 'Art 33/34',\n title: 'Breach Notification Protocol',\n description: '72-hour supervisory authority notification process and risk assessments.',\n score: 90,\n passed: 4,\n total: 5,\n status: '90% Passed · 4/5 tests',\n statusVariant: 'warning',\n highlights: ['72-Hour DPA Escalation SLA', 'Subject Notification Workflow'],\n iconType: 'activity',\n },\n ],\n tests: [\n {\n id: 'test-gdpr-1',\n code: 'Art 17',\n name: 'Right to Erasure / DSR Pipeline',\n description: 'Automated user data deletion across database tables and 3rd party integrations in < 30 days.',\n category: 'DevOps & CI/CD',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'dsr-erasure-orchestrator.json',\n verified: true,\n lastTested: '14m ago',\n auditorNotes: 'Mean time to complete erasure request: 4.2 hours.',\n },\n {\n id: 'test-gdpr-2',\n code: 'Art 30',\n name: 'RoPA Inventory Live Synchronization',\n description:\n 'Data classification tags synced with schema catalog to ensure full records of processing coverage.',\n category: 'Identity & Auth',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'ropa-schema-mapping-v3.json',\n verified: true,\n lastTested: '6m ago',\n auditorNotes: '100% of PII data fields mapped to lawful basis.',\n },\n {\n id: 'test-gdpr-3',\n code: 'Art 28',\n name: 'Data Processing Agreements (DPAs)',\n description: 'Standard Contractual Clauses (SCCs) and DPAs executed with all EU data processors.',\n category: 'People & HR',\n frequency: 'Monthly',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'dpa-register-eu-2026.pdf',\n verified: true,\n lastTested: 'Aug 10, 2026',\n auditorNotes: 'All sub-processors compliant with EU-US Data Privacy Framework.',\n },\n {\n id: 'test-gdpr-4',\n code: 'Art 7',\n name: 'Cookie Consent & Preference CMP',\n description: 'Explicit opt-in banner blocking non-essential tracking prior to affirmative user consent.',\n category: 'Cloud Infrastructure',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'cmp-consent-telemetry.json',\n verified: true,\n lastTested: '1h ago',\n auditorNotes: 'Zero tracking cookies loaded prior to consent confirmation.',\n },\n {\n id: 'test-gdpr-5',\n code: 'Art 32(1)(a)',\n name: 'PII Field-Level Encryption at Rest',\n description: 'Names, emails, and financial identifiers hashed or encrypted with AES-256 before storage.',\n category: 'Cloud Infrastructure',\n frequency: 'Continuous (1h)',\n status: 'Passing',\n statusVariant: 'success',\n artifact: 'field-encryption-audit.json',\n verified: true,\n lastTested: '25m ago',\n auditorNotes: 'KMS envelope encryption active on all customer records.',\n },\n {\n id: 'test-gdpr-6',\n code: 'Art 33',\n name: '72-Hour Breach Notification Drill',\n description: 'Tabletop simulation testing supervisory authority DPA notification within statutory 72h window.',\n category: 'Security Operations',\n frequency: 'Quarterly',\n status: 'Needs Attention',\n statusVariant: 'warning',\n artifact: 'gdpr-breach-playbook-2026.pdf',\n verified: false,\n lastTested: '4 days ago',\n auditorNotes: 'DPO escalation contact list updated; tabletop review due in Q3.',\n },\n ],\n trustCenterUrl: 'https://trust.uipkge.dev',\n },\n}\n\nfunction getPillarIcon(iconType: string): React.ComponentType<{ className?: string }> {\n switch (iconType) {\n case 'key':\n return KeyRound\n case 'shield':\n return ShieldCheck\n case 'activity':\n return Zap\n case 'users':\n return Users\n case 'lock':\n return Lock\n case 'server':\n return Server\n case 'file':\n return FileText\n default:\n return Shield\n }\n}\n\nexport function ComplianceSoc2Readiness({\n defaultFramework = 'soc2',\n className,\n ...props\n}: ComplianceSoc2ReadinessProps) {\n const [activeFrameworkId, setActiveFrameworkId] = React.useState(defaultFramework)\n const [searchQuery, setSearchQuery] = React.useState('')\n const [selectedCategory, setSelectedCategory] = React.useState('all')\n const [runningTestIds, setRunningTestIds] = React.useState>({})\n const [lastTestedMap, setLastTestedMap] = React.useState>({})\n const [activeEvidenceModal, setActiveEvidenceModal] = React.useState(null)\n const [isTestingAll, setIsTestingAll] = React.useState(false)\n const [scheduleRequested, setScheduleRequested] = React.useState(false)\n const [exportSuccess, setExportSuccess] = React.useState(false)\n\n const currentFramework = frameworksData[activeFrameworkId] || frameworksData.soc2\n\n const availableCategories = React.useMemo(() => {\n const cats = new Set()\n currentFramework.tests.forEach((t) => cats.add(t.category))\n return ['all', ...Array.from(cats)]\n }, [currentFramework])\n\n const filteredTests = React.useMemo(() => {\n const q = searchQuery.trim().toLowerCase()\n const cat = selectedCategory\n return currentFramework.tests.filter((test) => {\n const matchesCat = cat === 'all' || test.category === cat\n const matchesQuery =\n !q ||\n test.code.toLowerCase().includes(q) ||\n test.name.toLowerCase().includes(q) ||\n test.description.toLowerCase().includes(q) ||\n test.artifact.toLowerCase().includes(q) ||\n test.category.toLowerCase().includes(q)\n return matchesCat && matchesQuery\n })\n }, [currentFramework, searchQuery, selectedCategory])\n\n function handleRunTest(testId: string) {\n setRunningTestIds((prev) => ({ ...prev, [testId]: true }))\n setTimeout(() => {\n setRunningTestIds((prev) => ({ ...prev, [testId]: false }))\n setLastTestedMap((prev) => ({ ...prev, [testId]: 'Just now' }))\n }, 500)\n }\n\n function handleRunAllTests() {\n setIsTestingAll(true)\n setTimeout(() => {\n setIsTestingAll(false)\n const updated: Record = {}\n currentFramework.tests.forEach((t) => {\n updated[t.id] = 'Just now'\n })\n setLastTestedMap((prev) => ({ ...prev, ...updated }))\n }, 700)\n }\n\n function handleScheduleReview() {\n setScheduleRequested(true)\n setTimeout(() => {\n setScheduleRequested(false)\n }, 3000)\n }\n\n function handleExportPackage() {\n setExportSuccess(true)\n setTimeout(() => {\n setExportSuccess(false)\n }, 3000)\n }\n\n return (\n
\n {/* Framework Selector Tabs */}\n \n
\n \n \n SOC 2 Type II\n \n \n ISO 27001\n \n \n HIPAA Security Rule\n \n \n GDPR\n \n \n\n
\n \n Real-time Telemetry Ingestion Active\n
\n
\n\n {/* Executive Overview Card */}\n \n \n
\n {/* Left: Framework info */}\n
\n
\n

\n {currentFramework.name}\n

\n \n {currentFramework.badge}\n \n
\n

{currentFramework.standard}

\n
\n \n \n {currentFramework.period}\n \n \n \n Lead Assessor: {currentFramework.auditor}\n \n
\n
\n\n {/* Right: Big Score Card & Action Buttons */}\n
\n {/* Score Badge */}\n
\n
\n \n
\n
\n
\n \n {currentFramework.score}%\n \n \n \n {currentFramework.readinessLabel.replace(`${currentFramework.score}% `, '')}\n \n
\n

\n {currentFramework.totalPassing}/{currentFramework.totalTests} Continuous Controls Passing\n

\n
\n
\n\n {/* Action Buttons */}\n
\n \n\n \n
\n
\n
\n \n \n\n {/* 4 Compliance Control Pillar Cards */}\n
\n {currentFramework.pillars.map((pillar) => {\n const IconComponent = getPillarIcon(pillar.iconType)\n return (\n \n \n
\n
\n
\n \n
\n \n {pillar.code}\n \n
\n\n \n {pillar.score === 100\n ? 'Zero Gaps'\n : pillar.statusVariant === 'warning'\n ? '1 Warning'\n : 'Passing'}\n \n
\n\n {pillar.title}\n {pillar.description}\n \n\n \n
\n
\n \n {pillar.score}%\n \n \n {pillar.passed}/{pillar.total} tests\n \n
\n \n
\n\n {/* Bullet highlights */}\n
\n {pillar.highlights.map((highlight) => (\n
\n \n {highlight}\n
\n ))}\n
\n \n \n )\n })}\n
\n\n {/* Automated Evidence Tests Table Card */}\n \n \n
\n
\n Automated Evidence Tests\n \n {filteredTests.length} Active\n \n
\n \n Continuous synthetic and policy compliance evaluation across infrastructure and IAM.\n \n
\n\n
\n \n \n {isTestingAll ? 'Evaluating Tests...' : 'Run All Automated Tests'}\n \n
\n \n\n {/* Filter & Search Toolbar */}\n
\n
\n
\n \n setSearchQuery(e.target.value)}\n type=\"text\"\n placeholder=\"Filter by control code, name, category, or evidence artifact...\"\n className=\"border-border bg-background placeholder:text-muted-foreground focus-visible:ring-ring h-8 w-full rounded-md border px-3 pl-8 text-xs focus-visible:ring-2 focus-visible:outline-none\"\n />\n
\n\n
\n \n \n Category:\n \n {availableCategories.map((cat) => (\n setSelectedCategory(cat)}\n >\n {cat === 'all' ? 'All Categories' : cat}\n \n ))}\n
\n
\n
\n\n {/* Table Container */}\n \n
\n \n \n \n Control & Rule Name\n Domain Category\n Frequency\n Status\n Evidence Artifact\n Actions\n \n \n \n {filteredTests.map((test) => (\n \n {/* Control Code & Name */}\n \n
\n
\n {test.code}\n {test.name}\n
\n

\n {test.description}\n

\n
\n \n\n {/* Category */}\n \n \n {test.category}\n \n \n\n {/* Frequency */}\n \n
\n \n {test.frequency}\n
\n \n Tested: {lastTestedMap[test.id] || test.lastTested}\n \n \n\n {/* Status */}\n \n \n {test.status === 'Passing' ? (\n \n ) : (\n \n )}\n {test.status}\n \n \n\n {/* Evidence Artifact Link */}\n \n setActiveEvidenceModal(test)}\n >\n \n \n {test.artifact}\n \n {test.verified && }\n \n \n\n {/* Action Buttons */}\n \n
\n handleRunTest(test.id)}\n >\n \n Test Now\n \n\n setActiveEvidenceModal(test)}\n >\n \n Evidence\n \n
\n \n \n ))}\n\n {filteredTests.length === 0 && (\n \n \n

No automated compliance tests match your query.

\n \n \n )}\n \n
\n
\n \n \n\n {/* Auditor Access & Trust Center Preview Strip */}\n \n \n
\n
\n
\n \n
\n
\n
\n

Auditor Access & Public Trust Center

\n \n \n Vault Online\n \n
\n

\n Cryptographically verifiable evidence room configured for continuous compliance review by{' '}\n {currentFramework.auditor}.\n

\n
\n \n Access Grant: Valid for 14 days\n \n \n \n Trust Portal: {currentFramework.trustCenterUrl}\n \n
\n
\n
\n\n
\n \n \n \n\n \n
\n
\n \n\n {/* Bottom Audit Ingestion Watermark */}\n
\n
\n \n Ledger Stamp: 0x9b4a8e217f0a4421b8c1992019a · SHA-256 Verified\n
\n \n Framework: {currentFramework.tabLabel} · Last Evaluation: Just now\n \n
\n \n \n\n {/* Modal / Sheet Preview for Evidence Artifact */}\n {activeEvidenceModal && (\n {\n if (e.target === e.currentTarget) {\n setActiveEvidenceModal(null)\n }\n }}\n >\n \n \n
\n
\n \n {activeEvidenceModal.code}\n \n Evidence Verification Details\n
\n {activeEvidenceModal.name}\n
\n setActiveEvidenceModal(null)}\n >\n \n \n \n\n \n
\n
\n Artifact File:\n {activeEvidenceModal.artifact}\n
\n
\n Verification Status:\n \n {activeEvidenceModal.verified ? (\n \n ) : (\n \n )}\n {activeEvidenceModal.verified ? 'Cryptographically Verified' : 'Action Required'}\n \n
\n
\n Test Frequency:\n {activeEvidenceModal.frequency}\n
\n
\n\n
\n Auditor Evaluation Notes:\n

\n {activeEvidenceModal.auditorNotes}\n

\n
\n\n
\n setActiveEvidenceModal(null)}\n >\n Close\n \n setActiveEvidenceModal(null)}\n >\n \n Download Artifact\n \n
\n \n \n
\n )}\n \n )\n}\n", "type": "registry:block", "target": "~/components/blocks/ComplianceSoc2Readiness.tsx" } ], "dependencies": [ "lucide-react" ], "devDependencies": [], "registryDependencies": [ "https://uipkge.dev/r/react/badge.json", "https://uipkge.dev/r/react/button.json", "https://uipkge.dev/r/react/card.json", "https://uipkge.dev/r/react/progress.json", "https://uipkge.dev/r/react/separator.json", "https://uipkge.dev/r/react/table.json", "https://uipkge.dev/r/react/tabs.json" ], "description": "Vanta/Drata-style SOC 2 Type II, ISO 27001, and HIPAA compliance readiness dashboard with framework selector tabs, audit readiness scorecards, 4 control pillar health bars, continuous automated evidence test tables with verified artifact badges, and auditor trust center portal controls.", "categories": [ "legal", "app", "security" ] }