Vuln→Framework matrix
Links the supporting assets' vulnerabilities to the security framework requirements. This is the link that lets the baseline (1.4) pre-fill itself from the assessments (1.5).
Add-on page
Like 1.5, this page depends on the "Vulnerability assessment" add-on ticked in 1.1 Study context.
Creating links
Select a framework, then a chapter; for each article, add the supporting asset + vulnerability pairs it concerns, with a weight.
Two shortcuts:
| Button | Effect |
|---|---|
| Load a preset | Applies a predefined set of correspondences for this framework |
| Auto-fill | Pre-fills the framework's scores from the vulnerability assessments |
Loading a preset replaces the framework's existing links, after a confirmation stating how many there are.
Matching rule
This is what translates a control level into a compliance score:
| Control level (1.5) | Compliance score (1.4) |
|---|---|
| Critical / High | Non-compliant |
| Moderate | Partial |
| Controlled | Compliant |
The weight of each link weights the contribution of a vulnerability to the article's score.
If auto-fill produces nothing
Two possible causes, flagged by the button itself: no link defined for this framework, or no vulnerability assessed in 1.5.
In the report
The {TABLE-MATRICE-VULN-REF} block renders the matrix in the Word report — only if the add-on is active. The block carries its own title: unticking the add-on leaves no orphan section.