🔴
Critical
0
Active threats
🟠
High
0
Requires action
🟡
Medium
0
Monitor closely
📋
Open / Active
0
Unresolved total
✅
Resolved
0
Mitigated
Threat Volume — Last 6 Months
Grouped by source agency · monthly count
Severity Distribution
Current period breakdown
Top 5 Impacted ISO Controls
Annex A control threat count
Recent Threat Intelligence
Latest 8 entries
| Date | Source | Threat | Severity | Control | Status |
|---|
Live Threat Feed
All ingested threats from CERT-IN · ISACA · OWASP · CSA · NCSC · CISA — immutable audit records
0 threats
| Date | Source | Threat / CVE | Category | Severity | Control | Status | Actions |
|---|
ISO 27001:2022 Control Matrix
Select a control to view all mapped threats · Proves continuous situational awareness per Clause 6.1.2
| Date | Source | Threat | Sev | AI Mapping |
|---|
All Controls — Implementation
Coverage & threat exposure
Automated Pipeline Status
5-layer ISMS architecture · FastAPI + Celery + Redis + PostgreSQL
Data Pipeline Stages
›
📡
Ingestion
Daily Celery workers scrape CERT-IN, OWASP, ISACA, CSA, NCSC, CISA
● Running
›
🤖
AI Enrichment
NLP maps threats to ISO 27001:2022 Annex A controls; justification text saved in DB
● Active
›
🗄
PostgreSQL
Immutable threat records, AI justifications, historical report metadata
● Connected
›
⚡
FastAPI Layer
REST API serves dashboard with RBAC-authenticated endpoints
● Serving
📊
Report Gen
Celery Beat triggers WeasyPrint PDF at 00:00 on 1st of every month
⏱ Scheduled
Technology Stack
Per specification document
| Layer | Technology | Purpose |
|---|---|---|
| Backend API | Python FastAPI | Async scraping + REST endpoints |
| Database | PostgreSQL | Relational audit-ready storage |
| Scheduler | Celery + Redis | Daily ingestion + monthly reports |
| Frontend | React + Tailwind | This dashboard UI |
| Report Gen | WeasyPrint | HTML/CSS → PDF export |
| AI Enrichment | Claude API | ISO control mapping + justification |
Audit Compliance Rules
ISMS best-practice requirements
🔒
Immutable Logs
Threats never deleted. False positives flagged "Retracted" — original record preserved for auditors.
🔗
Full Traceability
Every AI control mapping saves justification text + raw source JSON. Auditors can inspect reasoning chains.
📋
Clause 9.3 Evidence
Monthly PDF reports attached to Management Review meeting minutes as required ISMS evidence.
Report Archive
ISO/IEC 27001:2022 monthly threat intelligence reports · auto-generated on 1st of each month via Celery Beat
Audit Log
Immutable activity trail — all changes tracked as ISMS compliance evidence
Add Threat Intelligence
Manually record a threat with ISO 27001:2022 control mapping and AI justification saved for traceability
New Threat Entry
✓ Threat recorded successfully. Audit log updated.