Merge pull request #43 from devsecopsmaturitymodel/feat/enhanced-samm

Feat/enhanced samm

Author: wurstbrot

src/assets/YAML/default/BuildAndDeployment/Build.yaml

@@ -144,7 +144,8 @@ Build and Deployment:
       level: 2
       implementation: []
       references:
-        samm2: []
+        samm2:
+          - I-SB-1-A
         iso27001-2017:
           - 8.1
           - 8.2

src/assets/YAML/default/BuildAndDeployment/Deployment.yaml

@@ -20,7 +20,7 @@ Build and Deployment:
         - Smoke Test
       references:
         samm2:
-          - TODO
+          - I-SD-2-A
         iso27001-2017:
           - 17.2.1 # Availability of information processing facilities
           - 12.1.1 # Documented operational procedures
@@ -350,7 +350,8 @@ Build and Deployment:
       dependsOn:
         - Same artifact for environments
       references:
-        samm2: []
+        samm2:
+          - I-SD-2-A
         iso27001-2017:
           - 14.3.1
           - 14.2.8

src/assets/YAML/default/InformationGathering/Monitoring.yaml

@@ -94,7 +94,8 @@ Information Gathering:
       implementation: []
       references:
         samm2:
-          - I-DM-A 3
+          - O-IM-2-A
+          - I-DM-3-A
         iso27001-2017:
           - 16.1.2
           - 16.1.4
@@ -398,7 +399,8 @@ Information Gathering:
       implementation: []
       references:
         samm2:
-          - I-DM-A 3
+          - O-IM-2-A
+          - I-DM-3-A
         iso27001-2017:
           - Not explicitly covered by ISO 27001 - too specific
           - 16.1.5