To personalise the report a little more, another logo should be uploaded and put in the report.

Mainly in the report, the value of the organism is not displayed, or not clearly. It should be on the chart, highlighted respecting color configuration.

Add a possibility to have two questions with the same recommendation. This should be mostly visible in the recommendation tab and in the report.

Example : Protect the IT room could apply to question on visitors, and also on physical access rights.

In the same way, there could be some dependence between two or more recommendations :

Example :

• Do an user charter
  • Write in the user charter a word on password
  • Write in the user charter a word on computer update ...

Edit from May 9, 2018 : Recommendations should also be sorted by the expert doing the diagnostic in the report, depending on his feeling. Possibly by doing drag&drop to be more easily changed.

Get Zendframework to the last version,
Initially because some crypt function was depecrated. Import does not work anymore on last version.
Also, some library is outdated (chart 1.0 for instance), and can't be upgraded in ZF2.

Right now, we need to use html langage on translation tag.

Add a possibility to have a light export to make statistics without have to upload recommendations or notes. The export should be only based on UID to support multiple type of diagnostic and questions.

Add a new tab called "Languages" in the administration panel, where you could add a language. It should also be possible to change translation to other languages. Everything besides questions or categories (like system message, errors, words used in the report ...) should be found in this new tab.

Add an Unique ID for questions, mainly to do some statistics and merge some diagnostics data

It should be possible to change categories translation, and also add a category from the administration panel. It should also be possible to delete them.

To gain more precision on questions, give a different calculation method by adding Confidentiality, Integrity, Availability. An integer (or a boolean) should be in every question to determine which CIA criteria dominate the most. The company should also have a CIA criteria, to determine the risk more precisely.

The language key appears on the English language, but not on the French language. Probably a problem with the .mo file.

Right now, only an administrator could import a set of questions. Users could have the right to import/export questions which do not change database, for this diagnostic instance.

Currently, to add questions, we need to get in the .mo file and compile it once changes are made.
It should be possible to do it without getting into the diagnostic files, with a new interface (With translation key and the corresponding translations in .po files).

The Diagnostic should have an info file where a couple of information could be seen, displayed, or checked by the diagnostic (version, date of the release, UIDs, branch in github...). Many scripts could use theses informations.

To enhance the statistics, a country should be defined in each diagnostic. It should have a default country in the settings tab (Administration access).

• Correct the report, mostly by using reviewed ones (Text which appears twice, typo correction ...).
• Modify language files (PO/MO) to use new terms more appropriate (Maturity fragile/basic/optimised, or terms which MONARC use like "Existing control")
• Change the graph Maturity Evolution by one which is more significant. (Correlate with recommendations ?)
• Change the qualification level (Managed, More or Less Managed, Planned and Not Managed) to fragile/basic/optimised and Non-Applicable (N/A).
• Change calcul method :
  • Optimised = 1/1
  • Basic = 0.5/1
  • Fragile = 0/1
  • N/A = 0/0 (Not calculated or taken in the final percentage)
• Change the category colours in the compliance graph, corresponding by their percentage (< 33% red, >66% green, between orange, colours from MONARC.)
• Changes icons by red points like in MONARC.
• Use the MONARC colours in the report to indicate maturity in the detailed tab (And do not put icons anymore). Grey colour should be the one for N/A.
• Put legend before tabs in the report.
• Replace CASES icon for Diagnostic Icon (In the report and in the application)
• Add in language file columns of the tabs in the report (And add it in generations for the report).
• Add language (German needed)

In order to keep the diagnostic easily up to date, there should be an update button which takes the code from github and put it on the server. The choice could be made to be either the test version or the master version (With a warning to indicate that the test version shouldn't be used when some real diagnostic are done)

This way, we do not have to manipulate file servers directly to add a new language template anymore.
Half done since there should be some enhancement.

Most of the options in the configuration files (Default language, Encryption Key, enable/disable MxCheck ...) should be accessible directly from the application, and not by manually editing the files as it is right now.

Add a question in administrator mode reset all questions ID of the diagnostic to what they were in the administrator mode.
Thereby, if the diagnostic doesn't have these ID, they will be changed, and due to the fact that the question's information are link to the questions ID, they won't be link to the good question anymore.

Add possibilities to change encryption key at the installation (with packer or in the scripts). The iv should also be asked (or at least generated)