[FEAT] UI frontend gap competitivi + help/i18n + OpenAPI + scorecard EVIX
UI delle 4 feature backend (ora usabili dagli utenti, non solo via API): - risks.html: vista 'Quantitativo (FAIR)' con form + istogramma distribuzione ALE + registro portafoglio; vista 'KRI' con dashboard semafori green/amber/red + CRUD - reports.html: tab 'Monitoraggio Continuo' con semafori freschezza controlli (healthy/warning/stale/failing) + copertura - assets.html: bottone 'Importa' CSV/CMDB con parsing client + anteprima + scoring auto GV.OC-04 - api.js: metodi computeFair/getFairRegister/listKri/createKri/updateKri/importAssets/getControlsMonitoring Trasversale: - help.js: sezioni guida FAIR+KRI (risks), import CMDB (assets), monitoraggio continuo (reports) - i18n.js: chiavi IT/EN (risks.fair_tab, risks.kri_tab, assets.import_btn, audit.monitoring_tab) - ServicesController::openapi esteso con incidents-ingest/evidence-ingest/assets-ingest/controls-monitoring + securityScheme ApiKeyAuth - AuditController::controlsMonitoring (versione JWT per la UI) + route audit/controlsMonitoring - EVIX scorecard: gap P1/P2 marcati chiusi (backend), roadmap aggiornata Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
DevEnv nis2-agile
co-authored by
Claude Opus 4.8
Claude Opus 4.8
parent
edf0394616
commit
372ccb5ec1
+213
-2
@@ -306,6 +306,8 @@
|
||||
<div class="view-toggle" id="view-toggle">
|
||||
<button class="active" onclick="switchView('table')">Tabella</button>
|
||||
<button onclick="switchView('matrix')">Matrice</button>
|
||||
<button onclick="switchView('fair')" data-i18n="risks.fair_tab">Quantitativo (FAIR)</button>
|
||||
<button onclick="switchView('kri')" data-i18n="risks.kri_tab">KRI</button>
|
||||
</div>
|
||||
<button class="btn btn-secondary" id="btn-ai-suggest" onclick="aiSuggest()">
|
||||
<svg viewBox="0 0 20 20" fill="currentColor" width="18" height="18"><path d="M5 2a1 1 0 011 1v1h1a1 1 0 010 2H6v1a1 1 0 01-2 0V6H3a1 1 0 010-2h1V3a1 1 0 011-1zm0 10a1 1 0 011 1v1h1a1 1 0 110 2H6v1a1 1 0 11-2 0v-1H3a1 1 0 110-2h1v-1a1 1 0 011-1zm7-10a1 1 0 01.967.744L14.146 7.2 17.5 8.512a1 1 0 010 1.836l-3.354 1.311-1.18 4.456a1 1 0 01-1.932 0L9.854 11.66 6.5 10.348a1 1 0 010-1.836l3.354-1.311 1.18-4.456A1 1 0 0112 2z"/></svg>
|
||||
@@ -410,6 +412,65 @@
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- FAIR Quantitative View -->
|
||||
<div id="view-fair" class="hidden">
|
||||
<div class="card" style="margin-bottom:16px;">
|
||||
<div class="card-header">
|
||||
<h3>Analisi Quantitativa del Rischio (FAIR)</h3>
|
||||
<span class="text-muted" style="font-size:0.8rem;">Perdita Annua Attesa (ALE) in EUR — simulazione Monte Carlo</span>
|
||||
</div>
|
||||
<div class="card-body">
|
||||
<div style="display:grid; grid-template-columns:repeat(auto-fit,minmax(140px,1fr)); gap:12px; margin-bottom:16px;">
|
||||
<div><label class="form-label">Rischio</label>
|
||||
<select class="form-select" id="fair-risk-select"><option value="">— seleziona —</option></select></div>
|
||||
<div><label class="form-label">TEF min <small>(ev/anno)</small></label><input type="number" step="0.1" class="form-input" id="fair-tef-min" value="0.5"></div>
|
||||
<div><label class="form-label">TEF probabile</label><input type="number" step="0.1" class="form-input" id="fair-tef-ml" value="1"></div>
|
||||
<div><label class="form-label">TEF max</label><input type="number" step="0.1" class="form-input" id="fair-tef-max" value="2"></div>
|
||||
<div><label class="form-label">Vulnerabilita <small>(0-1)</small></label><input type="number" step="0.05" min="0" max="1" class="form-input" id="fair-vuln" value="0.3"></div>
|
||||
<div><label class="form-label">Perdita min <small>(EUR)</small></label><input type="number" step="1000" class="form-input" id="fair-lm-min" value="50000"></div>
|
||||
<div><label class="form-label">Perdita probabile</label><input type="number" step="1000" class="form-input" id="fair-lm-ml" value="300000"></div>
|
||||
<div><label class="form-label">Perdita max</label><input type="number" step="1000" class="form-input" id="fair-lm-max" value="2000000"></div>
|
||||
</div>
|
||||
<button class="btn btn-primary" onclick="runFair()" id="btn-run-fair">Calcola ALE</button>
|
||||
<div id="fair-result" class="hidden" style="margin-top:20px;">
|
||||
<div style="display:grid; grid-template-columns:repeat(auto-fit,minmax(150px,1fr)); gap:12px; margin-bottom:16px;">
|
||||
<div class="stat-box"><div class="stat-label">ALE P10 (ottimistico)</div><div class="stat-value" id="fair-p10">—</div></div>
|
||||
<div class="stat-box" style="border-color:var(--primary);"><div class="stat-label">ALE Mediana (P50)</div><div class="stat-value" id="fair-p50">—</div></div>
|
||||
<div class="stat-box"><div class="stat-label">ALE P90 (pessimistico)</div><div class="stat-value" id="fair-p90">—</div></div>
|
||||
<div class="stat-box"><div class="stat-label">ALE Media</div><div class="stat-value" id="fair-mean">—</div></div>
|
||||
</div>
|
||||
<div style="font-size:0.8rem; color:var(--gray-600); margin-bottom:8px;">Distribuzione delle perdite annue simulate (LEF medio <span id="fair-lef">—</span> eventi/anno):</div>
|
||||
<div id="fair-histogram" style="display:flex; align-items:flex-end; gap:2px; height:160px; border-bottom:2px solid var(--gray-300); padding:4px;"></div>
|
||||
<div id="fair-histogram-labels" style="display:flex; gap:2px; font-size:0.65rem; color:var(--gray-500); margin-top:4px;"></div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div class="card">
|
||||
<div class="card-header"><h3>Registro Quantitativo</h3>
|
||||
<span class="text-muted" style="font-size:0.8rem;">ALE di portafoglio: <strong id="fair-portfolio">—</strong></span></div>
|
||||
<div class="table-container">
|
||||
<table class="table-clickable"><thead><tr>
|
||||
<th>Codice</th><th>Titolo</th><th>Categoria</th><th>ALE Min</th><th>ALE Mediana</th><th>ALE Max</th><th>ALE Media</th>
|
||||
</tr></thead><tbody id="fair-register-body"><tr><td colspan="7" class="text-muted" style="text-align:center;padding:20px;">Nessun rischio quantificato</td></tr></tbody></table>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- KRI Dashboard View -->
|
||||
<div id="view-kri" class="hidden">
|
||||
<div style="display:flex; justify-content:space-between; align-items:center; margin-bottom:16px;">
|
||||
<div id="kri-summary" style="display:flex; gap:12px;"></div>
|
||||
<button class="btn btn-primary" onclick="showKriModal()">+ Nuovo KRI</button>
|
||||
</div>
|
||||
<div class="card">
|
||||
<div class="table-container">
|
||||
<table class="table-clickable"><thead><tr>
|
||||
<th>Stato</th><th>Indicatore</th><th>Categoria</th><th>Valore</th><th>Soglia Warning</th><th>Soglia Critica</th><th>Azioni</th>
|
||||
</tr></thead><tbody id="kri-table-body"><tr><td colspan="7"><div class="spinner" style="margin:30px auto;"></div></td></tr></tbody></table>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- Detail View -->
|
||||
<div id="view-detail" class="hidden"></div>
|
||||
</div>
|
||||
@@ -566,14 +627,164 @@
|
||||
currentView = view;
|
||||
document.getElementById('view-table').classList.toggle('hidden', view !== 'table');
|
||||
document.getElementById('view-matrix').classList.toggle('hidden', view !== 'matrix');
|
||||
document.getElementById('view-fair').classList.toggle('hidden', view !== 'fair');
|
||||
document.getElementById('view-kri').classList.toggle('hidden', view !== 'kri');
|
||||
document.getElementById('view-detail').classList.toggle('hidden', true);
|
||||
|
||||
const btns = document.querySelectorAll('#view-toggle button');
|
||||
btns.forEach(b => b.classList.remove('active'));
|
||||
if (view === 'table') btns[0].classList.add('active');
|
||||
else btns[1].classList.add('active');
|
||||
const idx = { table: 0, matrix: 1, fair: 2, kri: 3 }[view] ?? 0;
|
||||
if (btns[idx]) btns[idx].classList.add('active');
|
||||
|
||||
if (view === 'matrix') loadMatrix();
|
||||
if (view === 'fair') loadFair();
|
||||
if (view === 'kri') loadKri();
|
||||
}
|
||||
|
||||
// ── FAIR quantitativo ────────────────────────────────────────
|
||||
const fmtEur = n => '€ ' + Number(n || 0).toLocaleString('it-IT', { maximumFractionDigits: 0 });
|
||||
|
||||
async function loadFair() {
|
||||
// popola select rischi + registro
|
||||
try {
|
||||
const [risksRes, regRes] = await Promise.all([api.listRisks({ per_page: 200 }), api.getFairRegister()]);
|
||||
const sel = document.getElementById('fair-risk-select');
|
||||
if (risksRes.success) {
|
||||
const risks = risksRes.data.risks || risksRes.data || [];
|
||||
sel.innerHTML = '<option value="">— seleziona rischio —</option>' +
|
||||
risks.map(r => `<option value="${r.id}">${escapeHtml((r.risk_code ? r.risk_code + ' · ' : '') + r.title)}</option>`).join('');
|
||||
}
|
||||
if (regRes.success) renderFairRegister(regRes.data);
|
||||
} catch (e) { showNotification('Errore caricamento FAIR', 'error'); }
|
||||
}
|
||||
|
||||
function renderFairRegister(data) {
|
||||
document.getElementById('fair-portfolio').textContent = fmtEur(data.portfolio_ale_mean);
|
||||
const body = document.getElementById('fair-register-body');
|
||||
const risks = data.risks || [];
|
||||
if (!risks.length) { body.innerHTML = '<tr><td colspan="7" class="text-muted" style="text-align:center;padding:20px;">Nessun rischio quantificato. Calcola l\'ALE di un rischio qui sopra.</td></tr>'; return; }
|
||||
body.innerHTML = risks.map(r => `<tr>
|
||||
<td>${escapeHtml(r.risk_code || '—')}</td><td>${escapeHtml(r.title)}</td>
|
||||
<td>${escapeHtml(CATEGORY_LABELS[r.category] || r.category || '')}</td>
|
||||
<td>${fmtEur(r.ale_min)}</td><td><strong>${fmtEur(r.ale_ml)}</strong></td>
|
||||
<td>${fmtEur(r.ale_max)}</td><td>${fmtEur(r.ale_mean)}</td></tr>`).join('');
|
||||
}
|
||||
|
||||
async function runFair() {
|
||||
const riskId = document.getElementById('fair-risk-select').value;
|
||||
if (!riskId) { showNotification('Seleziona un rischio', 'warning'); return; }
|
||||
const btn = document.getElementById('btn-run-fair');
|
||||
setButtonLoading(btn, true);
|
||||
const payload = {
|
||||
tef_min: +document.getElementById('fair-tef-min').value,
|
||||
tef_ml: +document.getElementById('fair-tef-ml').value,
|
||||
tef_max: +document.getElementById('fair-tef-max').value,
|
||||
vuln: +document.getElementById('fair-vuln').value,
|
||||
lm_min: +document.getElementById('fair-lm-min').value,
|
||||
lm_ml: +document.getElementById('fair-lm-ml').value,
|
||||
lm_max: +document.getElementById('fair-lm-max').value,
|
||||
};
|
||||
try {
|
||||
const res = await api.computeFair(riskId, payload);
|
||||
if (res.success) {
|
||||
renderFairResult(res.data.result);
|
||||
showNotification('Analisi FAIR calcolata', 'success');
|
||||
api.getFairRegister().then(r => { if (r.success) renderFairRegister(r.data); });
|
||||
} else { showNotification(res.message || 'Errore calcolo FAIR', 'error'); }
|
||||
} catch (e) { showNotification('Errore di connessione', 'error'); }
|
||||
finally { setButtonLoading(btn, false); }
|
||||
}
|
||||
|
||||
function renderFairResult(r) {
|
||||
document.getElementById('fair-result').classList.remove('hidden');
|
||||
document.getElementById('fair-p10').textContent = fmtEur(r.ale_min);
|
||||
document.getElementById('fair-p50').textContent = fmtEur(r.ale_ml);
|
||||
document.getElementById('fair-p90').textContent = fmtEur(r.ale_max);
|
||||
document.getElementById('fair-mean').textContent = fmtEur(r.ale_mean);
|
||||
document.getElementById('fair-lef').textContent = (r.lef_mean ?? 0).toFixed(3);
|
||||
const bars = document.getElementById('fair-histogram');
|
||||
const labels = document.getElementById('fair-histogram-labels');
|
||||
const h = r.histogram || [];
|
||||
const maxCount = Math.max(1, ...h.map(b => b.count));
|
||||
bars.innerHTML = h.map(b => {
|
||||
const pct = Math.round(b.count / maxCount * 100);
|
||||
return `<div title="${fmtEur(b.from)} – ${fmtEur(b.to)}: ${b.count}" style="flex:1; background:var(--primary); opacity:.8; height:${pct}%; min-height:2px; border-radius:2px 2px 0 0;"></div>`;
|
||||
}).join('');
|
||||
labels.innerHTML = h.map((b, i) => i % 3 === 0 ? `<div style="flex:3; text-align:left;">${fmtEur(b.from)}</div>` : '').join('');
|
||||
}
|
||||
|
||||
// ── KRI dashboard ────────────────────────────────────────────
|
||||
const KRI_STATUS = { green: ['#22c55e', 'OK'], amber: ['#eab308', 'Attenzione'], red: ['#ef4444', 'Critico'], unknown: ['#9ca3af', 'N/D'] };
|
||||
|
||||
async function loadKri() {
|
||||
try {
|
||||
const res = await api.listKri();
|
||||
if (res.success) renderKri(res.data);
|
||||
else showNotification(res.message || 'Errore KRI', 'error');
|
||||
} catch (e) { showNotification('Errore di connessione', 'error'); }
|
||||
}
|
||||
|
||||
function renderKri(data) {
|
||||
const sum = data.summary || {};
|
||||
document.getElementById('kri-summary').innerHTML = ['red', 'amber', 'green', 'unknown'].map(s =>
|
||||
`<div class="stat-box" style="border-left:4px solid ${KRI_STATUS[s][0]};"><div class="stat-value">${sum[s] || 0}</div><div class="stat-label">${KRI_STATUS[s][1]}</div></div>`).join('');
|
||||
const body = document.getElementById('kri-table-body');
|
||||
const kris = data.kris || [];
|
||||
if (!kris.length) { body.innerHTML = '<tr><td colspan="7" class="text-muted" style="text-align:center;padding:20px;">Nessun KRI definito. Creane uno per monitorare gli indicatori di rischio.</td></tr>'; return; }
|
||||
body.innerHTML = kris.map(k => {
|
||||
const st = KRI_STATUS[k.status] || KRI_STATUS.unknown;
|
||||
const val = k.current_value !== null ? `${(+k.current_value).toLocaleString('it-IT')} ${k.unit || ''}` : '—';
|
||||
return `<tr>
|
||||
<td><span style="display:inline-block;width:12px;height:12px;border-radius:50%;background:${st[0]};" title="${st[1]}"></span></td>
|
||||
<td><strong>${escapeHtml(k.name)}</strong>${k.description ? `<br><small class="text-muted">${escapeHtml(k.description)}</small>` : ''}</td>
|
||||
<td>${escapeHtml(CATEGORY_LABELS[k.category] || k.category || '')}</td>
|
||||
<td><strong>${escapeHtml(val)}</strong></td>
|
||||
<td>${k.threshold_warning ?? '—'}</td><td>${k.threshold_critical ?? '—'}</td>
|
||||
<td><button class="btn btn-sm btn-secondary" onclick='showKriModal(${JSON.stringify(k)})'>Modifica</button></td></tr>`;
|
||||
}).join('');
|
||||
}
|
||||
|
||||
function showKriModal(kri = null) {
|
||||
const k = kri || {};
|
||||
const body = `
|
||||
<div class="form-group"><label class="form-label">Nome indicatore *</label><input class="form-input" id="kri-name" value="${escapeHtml(k.name || '')}"></div>
|
||||
<div class="form-group"><label class="form-label">Descrizione</label><input class="form-input" id="kri-desc" value="${escapeHtml(k.description || '')}"></div>
|
||||
<div style="display:grid;grid-template-columns:1fr 1fr;gap:10px;">
|
||||
<div class="form-group"><label class="form-label">Categoria</label><select class="form-select" id="kri-cat">
|
||||
${['cyber', 'operational', 'compliance', 'supply_chain', 'physical', 'human'].map(c => `<option value="${c}" ${k.category === c ? 'selected' : ''}>${CATEGORY_LABELS[c] || c}</option>`).join('')}</select></div>
|
||||
<div class="form-group"><label class="form-label">Unita (%, count, EUR...)</label><input class="form-input" id="kri-unit" value="${escapeHtml(k.unit || '')}"></div>
|
||||
<div class="form-group"><label class="form-label">Valore corrente</label><input type="number" step="any" class="form-input" id="kri-cur" value="${k.current_value ?? ''}"></div>
|
||||
<div class="form-group"><label class="form-label">Obiettivo</label><input type="number" step="any" class="form-input" id="kri-target" value="${k.target_value ?? ''}"></div>
|
||||
<div class="form-group"><label class="form-label">Soglia Warning</label><input type="number" step="any" class="form-input" id="kri-warn" value="${k.threshold_warning ?? ''}"></div>
|
||||
<div class="form-group"><label class="form-label">Soglia Critica</label><input type="number" step="any" class="form-input" id="kri-crit" value="${k.threshold_critical ?? ''}"></div>
|
||||
<div class="form-group" style="grid-column:span 2;"><label class="form-label">Direzione</label><select class="form-select" id="kri-dir">
|
||||
<option value="higher_worse" ${k.direction === 'higher_worse' ? 'selected' : ''}>Valori alti = peggio</option>
|
||||
<option value="lower_worse" ${k.direction === 'lower_worse' ? 'selected' : ''}>Valori bassi = peggio</option></select></div>
|
||||
</div>`;
|
||||
showModal(k.id ? 'Modifica KRI' : 'Nuovo KRI', body, {
|
||||
footer: `<button class="btn btn-secondary" onclick="closeModal()">Annulla</button>
|
||||
<button class="btn btn-primary" onclick="saveKri(${k.id || 'null'})">Salva</button>`
|
||||
});
|
||||
}
|
||||
|
||||
async function saveKri(id) {
|
||||
const data = {
|
||||
name: document.getElementById('kri-name').value.trim(),
|
||||
description: document.getElementById('kri-desc').value.trim(),
|
||||
category: document.getElementById('kri-cat').value,
|
||||
unit: document.getElementById('kri-unit').value.trim(),
|
||||
current_value: document.getElementById('kri-cur').value,
|
||||
target_value: document.getElementById('kri-target').value,
|
||||
threshold_warning: document.getElementById('kri-warn').value,
|
||||
threshold_critical: document.getElementById('kri-crit').value,
|
||||
direction: document.getElementById('kri-dir').value,
|
||||
};
|
||||
if (!data.name) { showNotification('Nome obbligatorio', 'warning'); return; }
|
||||
try {
|
||||
const res = id ? await api.updateKri(id, data) : await api.createKri(data);
|
||||
if (res.success) { closeModal(); showNotification('KRI salvato', 'success'); loadKri(); }
|
||||
else showNotification(res.message || 'Errore salvataggio', 'error');
|
||||
} catch (e) { showNotification('Errore di connessione', 'error'); }
|
||||
}
|
||||
|
||||
// ── Matrix ───────────────────────────────────────────────────
|
||||
|
||||
Reference in New Issue
Block a user