// Features section — CTRL Assist deep dive. // Left: 4 tabbed modes (matches the 4 analysis cards in the real app). // Right: an authentic-looking response panel that swaps content per tab. // Below: secondary grid of platform modules. const TAB_DATA = [ { id: 'risk', tag: 'RISK_ANALYSIS', label: 'Risk Analysis', tint: '#f97316', desc: 'Score likelihood and impact, auto-map to HIPAA safeguards, and generate a defensible narrative — all from a one-line description.', panel: { title: 'Lack of Data Loss Prevention Controls', kind: 'Risk Analysis', body: [ { type: 'section', text: 'LIKELIHOOD × IMPACT' }, { type: 'stat-row', items: [ { k: 'Likelihood', v: '3/5', tint: '#38bdf8' }, { k: 'Impact', v: '3/5', tint: '#f97316' }, { k: 'Score', v: '9', tint: '#a855f7' }, ]}, { type: 'section', text: 'NARRATIVE' }, { type: 'p', text: 'Absence of DLP controls creates moderate-to-high exposure. Unauthorized PHI egress through email, removable media, and unsanctioned cloud storage cannot be reliably detected.' }, { type: 'section', text: 'HIPAA MAPPING' }, { type: 'chips', items: ['§ 164.308(a)(1)(ii)(A)', '§ 164.312(b)', '§ 164.310(c)'] }, ], }, }, { id: 'treatment', tag: 'TREATMENT_OPTIONS', label: 'Treatment Options', tint: '#a855f7', desc: 'Get ranked mitigation, transfer, and acceptance strategies — with implementation effort, residual risk, and control coverage for each.', panel: { title: 'Lack of Data Loss Prevention Controls', kind: 'Treatment Options', body: [ { type: 'section', text: 'RECOMMENDED · MITIGATE' }, { type: 'rec', tint: '#22c55e', h: 'Deploy endpoint DLP agent', meta: ['Effort: Medium', 'Residual: 3', 'Coverage: 6 controls'] }, { type: 'section', text: 'ALTERNATIVE · MITIGATE' }, { type: 'rec', tint: '#38bdf8', h: 'Email-gateway PHI scanning', meta: ['Effort: Low', 'Residual: 5', 'Coverage: 2 controls'] }, { type: 'section', text: 'TRANSFER' }, { type: 'rec', tint: '#eab308', h: 'Cyber-liability rider for data-exfil events', meta: ['Effort: Low', 'Financial offset only'] }, ], }, }, { id: 'mapping', tag: 'CONTROL_MAPPING', label: 'Control Mapping', tint: '#38bdf8', desc: 'Map any risk to applicable HIPAA controls, flag which are Required vs Addressable, and identify gaps in your current program.', panel: { title: 'Lack of Data Loss Prevention Controls', kind: 'Control Mapping', body: [ { type: 'section', text: 'REQUIRED CONTROLS (3)' }, { type: 'ctrl', id: '164.312(a)(2)(i)', name: 'Unique User Identification', req: 'REQUIRED', tint: '#f87171', why: 'Enables detection of unauthorized access and exfiltration.' }, { type: 'ctrl', id: '164.312(b)', name: 'Audit Controls', req: 'REQUIRED', tint: '#f87171', why: 'Mandatory logging to detect and investigate data-loss incidents.' }, { type: 'ctrl', id: '164.310(c)', name: 'Workstation Security', req: 'REQUIRED', tint: '#f87171', why: 'Prevents unauthorized workstation use for exfiltration.' }, { type: 'section', text: 'ADDRESSABLE (1)' }, { type: 'ctrl', id: '164.312(e)(2)(ii)', name: 'Encryption in Transit', req: 'ADDRESSABLE', tint: '#eab308', why: 'Mitigates exfil via unencrypted channels.' }, ], }, }, { id: 'reference', tag: 'HIPAA_REFERENCE', label: 'HIPAA Reference', tint: '#eab308', desc: 'Every answer cites regulations directly — 45 CFR sections, OCR guidance, and NIST CSF 2.0 mappings. No invented references.', panel: { title: 'Lack of Data Loss Prevention Controls', kind: 'HIPAA Reference', body: [ { type: 'section', text: '45 CFR § 164.308(a)(1)(ii)(A)' }, { type: 'quote', text: 'Conduct an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information…' }, { type: 'section', text: 'OCR GUIDANCE · 2024-06-12' }, { type: 'p', text: 'The Office for Civil Rights emphasized that DLP is considered a reasonable safeguard under the Security Rule where risk analysis identifies material exfiltration exposure.' }, { type: 'section', text: 'NIST CSF 2.0 CROSSWALK' }, { type: 'chips', items: ['PR.DS-01', 'PR.DS-02', 'DE.CM-01', 'DE.CM-03'] }, ], }, }, ]; // ─── Render helpers for panel body ──────────────────────────────── const PanelBody = ({ blocks }) => { const mono = { fontFamily: "'JetBrains Mono', ui-monospace, monospace" }; return (