Website improvements

[jmatthews-scottlogic]

Hi Rob,

We've tackled the items in your Website Improvements list, except for Left-hand navigator (figure out how to turn this on). The left-hand nav is only supported for markdown-based docs, rather than the dynamically created pages in use here.

Hope these changes are helpful.

Joel and Gagan

[linux-foundation-easycla]

The committers listed above are authorized under a signed CLA.

• ✅ login: jmatthews-scottlogic / name: Joel Matthews (9638f87, 2e84ecb, 5e18ba8, 8082ceb, a5ee1e9)
• ✅ login: gaganahluwalia / name: Gagan Singh (e2e2772, 5a7d4c3)

[jmatthews-scottlogic]

Working on correcting the git authors now

[robmoffat]

trying to get the preview working

[robmoffat]

Ok, good start!

Can we make this look a little more like a breadcrumb? And omit it from the project front page?

• Perhaps create ovals around the parts
• Make Title Case
• ccc -> Common Cloud Controls

[robmoffat]

what's going on with this file?

[robmoffat]

spelt wrong if needed too

[jmatthews-scottlogic]

Thanks for your feedback Rob, we're working through it now.

I can remove the controlMappins.json file and dynamically create the required links to the sources.

NIST host control information themselves, and I've found a good source for CCM. ISO have their control information behind a paywall however and the only pages I've found are third party blogs that aren't authoritative. What do you suggest for the ISO links?

[robmoffat]

Adding @eddie-knight as he maintains the schema project and might have thought about this.

Ideally, we need to have a URL for each of these reference-ids, perhaps a file that dereferences them and explains what they are all for?

Something like

# references.yaml

sources: 
  - id: NIST_800_53
    source_url: https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final
    version: v5
    title: "Security and Privacy Controls for Information Systems and Organizations"
    reference_pattern: "https://csf.tools/reference/nist-sp-800-53/r5/${id.substring(0,2)}/${id}/"

Am I on the right track here?

[robmoffat]

I've approved the PR. You can merge when you're ready.

[eddie-knight]

@robmoffat that looks pretty close to the structure in the new metadata schema.

example: https://github.com/ossf/security-baseline/blob/main/baseline/frameworks.yaml

[jmatthews-scottlogic]

Would someone merge this if you're happy please?

[robmoffat]

@robmoffat that looks pretty close to the structure in the new metadata schema.

example: https://github.com/ossf/security-baseline/blob/main/baseline/frameworks.yaml

I take it we don't have one of these in CCC yet?