+ {/* Schutzbedarf-Banner mit Simulation */}
+
+
+
+
Schutzbedarf steuert die Anforderungen
+
+ Verknüpfte Assets:{" "}
+ {linkedAssets.length
+ ? linkedAssets.map((a) => `${a.name} (${a.c}/${a.i}/${a.a})`).join(" · ")
+ : "—"}{" "}
+ · abgeleitet: {PROTECTION_LABEL[actualLevel]} (max C/I/A {maxCia})
+
+
+
+ Simulieren:
+ {([1, 2, 3] as ProtectionLevel[]).map((lvl) => (
+
+ ))}
+
+
+
+
+ {/* Flache Anforderungsliste, nach Themen gruppiert */}
+
+
Anforderungen
+
+ Nur die tatsächlich relevanten Anforderungen — mit Referenz und Herkunfts-Control.
+
+ {themes.map((theme) => {
+ const rows = reqs.filter((r) => r.theme === theme);
+ if (rows.length === 0) return null;
+ return (
+
+
+ {THEME_LABEL[theme]}
+
+
+ {rows.map((r) => {
+ const st = status(r);
+ return (
+ -
+ {st === "met" ? (
+
+ ) : st === "open" ? (
+
+ ) : (
+
+ )}
+ {r.label}
+ {st === "open" && (
+
+ + verknüpfen
+
+ )}
+ {r.control}
+
+ );
+ })}
+
+
+ );
+ })}
+
+ {/* Gate-Panel */}
+ {gateActive && (
+
+
+ Sehr hoher Schutzbedarf — Kompensation erforderlich
+
+
+ Kein gültiges Third-Party-Audit / TISAX-Label. Nachweis über eine der Optionen:
+
+
+
+
Option A · Audit-Nachweis
+
+ TISAX-Label / Audit erfassen
+
+
oder selbst durchgeführtes Lieferanten-Audit
+
+
+
Option B · Kompensation (beides nötig)
+
+
+ Managemententscheidung
+
+ Dokumentieren
+
+
+
+ Risiko im Risikomodul
+
+
+
+
+
+
+ )}
+
+
+ {/* Reifegrad-/Konformitätskarte */}
+
+
+
+
+
Reifegrad
+
+ {maturity.toFixed(1)} / {targetMaturity.toFixed(1)}
+
+
+
+
+ {isbValue != null ? "ISB-freigegeben" : `berechnet: ${computedMaturity.toFixed(1)}`}
+
+
+
- {/* Stammdaten + Assets */}
-
-
-
- - {t("sector")}
- - {supplier.sector ?? tc("none")}
- - {t("services")}
- - {supplier.services ?? tc("none")}
- - {t("contact")}
- - {supplier.contact ?? tc("none")}
- - {t("dataCategories")}
- - {supplier.dataCategories.join(", ") || tc("none")}
- - {t("protection")}
- - {t("nextReview")}
- - {date(supplier.nextReview)}
-
-
-
-
{t("assets")}
- {supplier.assetLinks.length === 0 &&
{tc("none")}
}
-
- {supplier.assetLinks.map((l) => (
- -
- {l.asset.name}
-
- ))}
-
- {supplier.notes &&
{supplier.notes}
}
-
-
+
- {/* Managemententscheidung nötig? */}
- {decisionNeeded && (
-
-
-
{t("decisionNeeded")}
-
- )}
-
- {/* VDA-ISA Kap. 6 Reifegrade */}
+ {/* Risiken */}
- {t("catalog")}
- {t("catalogNote")}
-
- {controls.map((c) => {
- const m = matById.get(c.id) ?? 0;
- return (
-
-
-
- {c.ref} · {c.objective}
-
-
- {t("maturity")} {m}/5 · {t("target")} {c.targetMaturity}
-
-
-
- {[1, 2, 3, 4, 5].map((s) => (
- = c.targetMaturity
- ? "var(--ok)"
- : "var(--warn)"
- : "rgba(120,135,180,0.2)",
- }}
- />
- ))}
-
- {c.references && (
-
{t("references")}: {c.references}
- )}
-
- );
- })}
-
{t("risks")}
+ {supplier.riskAssets.length === 0 && {tc("none")}
}
+
+ {supplier.riskAssets.map((ra) => (
+ -
+ R-{String(ra.risk.refNo).padStart(3, "0")}
+ {ra.risk.title}
+
+ ))}
+
- {/* Nachweise */}
-
- {supplier.evidence.length === 0 ? (
-
- ) : (
- supplier.evidence.map((e) => (
-
- {tEKind(e.kind)}
- {e.name ?? tEKind(e.kind)}
- {e.protectsCia && ({e.protectsCia})}
- {e.adequacyChecked && {t("adequacy")}}
- {e.validTo && (
-
- {t("expires")} {date(e.validTo)}
-
- )}
-
- ))
- )}
-
+ {/* Verträge & NDA & Nachweise (read) */}
+
+
+ {t("contracts")} & {t("ndas")}
+
+ {supplier.contracts.map((c) => (
+ -
+ {c.reference ?? c.type}
+ {c.avDpa && AV/DPA}
+ {c.validTo && {t("validTo")}: {date(c.validTo)}}
+
+ ))}
+ {supplier.ndas.map((n) => (
+ -
+ NDA: {n.subject ?? n.parties ?? ""}
+ {n.validTo && {t("validTo")}: {date(n.validTo)}}
+
+ ))}
+ {supplier.contracts.length + supplier.ndas.length === 0 && - {tc("none")}
}
+
+
+
+ {t("evidence")}
+
+ {supplier.evidence.map((e) => (
+ -
+ {tEKind(e.kind)}
+ {e.name ?? tEKind(e.kind)}
+ {e.adequacyChecked && {t("adequacy")}}
+ {e.validTo && {t("expires")} {date(e.validTo)}}
+
+ ))}
+ {supplier.evidence.length === 0 && - {tc("none")}
}
+
+
+
- {/* Bewertungen */}
-
- {supplier.assessments.length === 0 ? (
-
- ) : (
- supplier.assessments.map((a) => (
-
- {tAType(a.type)}
- {a.score != null && {a.score}/100}
- {a.result && {a.result}}
- {date(a.date)}
-
- ))
- )}
-
-
- {/* Verträge */}
-
- {supplier.contracts.length === 0 ? (
-
- ) : (
- supplier.contracts.map((k) => (
-
- {k.reference ?? k.type}
- {k.avDpa && {t("avDpa")}}
- {k.flowdown && {t("flowdown")}}
- {k.validTo && (
-
- {t("validTo")}: {date(k.validTo)}
-
- )}
-
- ))
- )}
-
-
- {/* NDAs */}
-
- {supplier.ndas.length === 0 ? (
-
- ) : (
- supplier.ndas.map((n) => (
-
- {n.subject ?? n.parties ?? "NDA"}
- {n.validTo && (
-
- {t("validTo")}: {date(n.validTo)}
-
- )}
- {n.extensionStatus && · {n.extensionStatus}}
-
- ))
- )}
-
-
- {/* RACI */}
-
- {supplier.responsibilities.length === 0 ? (
-
- ) : (
- supplier.responsibilities.map((r) => (
-
- {r.itService}
- · {r.requirement}
-
- {tParty(r.responsibleParty)}
-
-
- ))
- )}
-
-
- {/* Subunternehmer */}
- {supplier.subcontractors.length > 0 && (
-
- {supplier.subcontractors.map((s) => (
-
- {s.name} {s.flowdownObligation && {t("flowdownObl")}}
-
- ))}
-
+ {/* ISB-Freigabe */}
+ {canWrite && (
+
+ {t("isbApproval")}
+
+ {t("approvalNote")}
+
)}
- {/* Entscheidungen */}
- {supplier.decisions.length > 0 && (
-
- {supplier.decisions.map((d) => (
-
- {d.decision}
- — {d.reasonNoAudit}
- · {d.decidedBy} · {date(d.date)}
-
- ))}
-
- )}
+ {/* Lifecycle + Datenkategorien */}
+
+ {t("status")}:
{tLife(p.lifecycle)}
+ {p.dataCategories.length > 0 && ` · ${t("dataCategories")}: ${p.dataCategories.join(", ")}`}
+
+
+