AdminGit2026/nis2-agile
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[FIX] SIM-06 + EmailService + WebhookService + supplier assessment

Browse Source 
- ServicesController::provision(): created_by usa userId (INT) non string
- EmailService::logEmail(): rimosso sent_at (colonna non esiste in email_log)
- WebhookService::incidentPayload(): status ?? 'detected' (null-safe)
- simulate-nis2.php: supplier assessment usa formato assessment_responses
  corretto [{question, weight, value: yes|partial|no}]

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
DevEnv nis2-agile
2026-03-09 09:56:39 +01:00
co-authored by Claude Sonnet 4.6
parent 4be541e9b5
commit 13df162ec4
4 changed files with 12 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
simulate-nis2.php
+10 -6
View File
@@ -809,13 +809,17 @@ foreach ($COMPANIES as $slug => $comp) {
// Assessment fornitore
if ($supId) {
// assessment_responses: array di {question, weight, value: yes|partial|no}
$highRisk = in_array($supDef['risk_level'], ['high', 'critical']);
$assessRes = api('POST', "/supply-chain/{$supId}/assess", [
'has_security_controls' => 1,
'has_incident_procedure' => $supDef['risk_level'] !== 'low' ? 1 : 0,
'gdpr_compliant' => 1,
'nis2_contractual_clauses' => $supDef['critical'] ? 1 : 0,
'last_audit_date' => date('Y-m-d', strtotime('-6 months')),
'notes' => "Assessment automatico — fornitore {$supDef['service_type']}",
'assessment_responses' => [
['question' => 'Controlli sicurezza implementati', 'weight' => 3, 'value' => 'yes'],
['question' => 'Procedura gestione incidenti', 'weight' => 2, 'value' => $highRisk ? 'yes' : 'partial'],
['question' => 'Conformità GDPR', 'weight' => 2, 'value' => 'yes'],
['question' => 'Clausole NIS2 nel contratto', 'weight' => 2, 'value' => $supDef['critical'] ? 'yes' : 'partial'],
['question' => 'Audit sicurezza negli ultimi 12 mesi', 'weight' => 1, 'value' => $highRisk ? 'yes' : 'partial'],
['question' => 'Piano business continuity documentato', 'weight' => 2, 'value' => 'partial'],
],
], $jwt, $orgId);
if (apiOk($assessRes, "supplier.assess")) {
ok("Assessment fornitore: {$supDef['name']}");