fix NIS-2 security incident report

verinice-veo#3451, verinice-veo#2645, verinice-veo#2648
SerNet · Dec 9, 2024 · df22335 · df22335
1 parent 6bd4cd0
commit df22335
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 2 deletions.
diff --git a/src/main/resources/templates/nis2-security-incident.md b/src/main/resources/templates/nis2-security-incident.md
@@ -158,7 +158,12 @@ ${bundle.incident_security_notificationType}
 
 <@def bundle.incident_description_others incident.incident_description_others />
 
-<@def bundle.incident_description_affectedProtectiongoals, (incident.incident_description_affectedProtectiongoals?map(item->bundle[item])?join(', '))! />
+<#-- Read those from the risk definition -->
+<#assign protectionGoals = ['confidentiality', 'integrity', 'availability', 'resilience']>
+
+<#assign affectedProtectionGoals = protectionGoals?filter(g->incident["incident_${g}_affected"]!false) />
+
+<@def bundle.affected_protection_goals, (affectedProtectionGoals?map(item->bundle[item])?join(', '))! />
 
 <@def bundle.incident_description_timeOfIncidentknown, incident.incident_description_timeOfIncidentknown />
 
@@ -188,7 +193,7 @@ ${bundle.incident_security_notificationType}
 
 <@def bundle.incident_presumedMotivation_collectedData, (incident.incident_presumedMotivation_collectedData?map(item->bundle[item])?join(', '))! />
 
-<@def bundle.incident_presumedMotivation_others incident.incident_presumedMotivation_others />
+<@def bundle.incident_presumedMotivation_otherPresumedMotivation incident.incident_presumedMotivation_otherPresumedMotivation />
 
 <@def bundle.incident_nis2presumedMotivation_unlawfuOrMaliciousActs incident.incident_nis2presumedMotivation_unlawfuOrMaliciousActs />
 

diff --git a/src/main/resources/templates/nis2-security-incident_de.properties b/src/main/resources/templates/nis2-security-incident_de.properties
@@ -41,3 +41,9 @@ notification_to_competent_authority=Meldung an zuständige Behörde oder CSIRT
 cross_border_incident=Vorfall mit Auslandsbezug
 
 time_zone_hint=Zeitangaben
+
+affected_protection_goals=Betroffene Schutzziele
+confidentiality=Vertraulichkeit
+integrity=Integrität
+availability=Verfügbarkeit
+resilience=Belastbarkeit
diff --git a/src/main/resources/templates/nis2-security-incident_en.properties b/src/main/resources/templates/nis2-security-incident_en.properties
@@ -41,3 +41,9 @@ notification_to_competent_authority=Notification to competent authority or CSIRT
 cross_border_incident=Cross border incident
 
 time_zone_hint=Time designations
+
+affected_protection_goals=Affected protection goals
+confidentiality=Confidentiality
+integrity=Integrity
+availability=Availability
+resilience=Resilience