// Features section — CTRL Assist deep dive. // Left: 4 tabbed modes (matches the 4 analysis cards in the real app). // Right: an authentic-looking response panel that swaps content per tab. // Below: secondary grid of platform modules. const TAB_DATA = [ { id: 'risk', tag: 'RISK_ANALYSIS', label: 'Risk Analysis', tint: '#f97316', desc: 'Score likelihood and impact, auto-map to HIPAA safeguards, and generate a defensible narrative — all from a one-line description.', panel: { title: 'Lack of Data Loss Prevention Controls', kind: 'Risk Analysis', body: [ { type: 'section', text: 'LIKELIHOOD × IMPACT' }, { type: 'stat-row', items: [ { k: 'Likelihood', v: '3/5', tint: '#38bdf8' }, { k: 'Impact', v: '3/5', tint: '#f97316' }, { k: 'Score', v: '9', tint: '#a855f7' }, ]}, { type: 'section', text: 'NARRATIVE' }, { type: 'p', text: 'Absence of DLP controls creates moderate-to-high exposure. Unauthorized PHI egress through email, removable media, and unsanctioned cloud storage cannot be reliably detected.' }, { type: 'section', text: 'HIPAA MAPPING' }, { type: 'chips', items: ['§ 164.308(a)(1)(ii)(A)', '§ 164.312(b)', '§ 164.310(c)'] }, ], }, }, { id: 'treatment', tag: 'TREATMENT_OPTIONS', label: 'Treatment Options', tint: '#a855f7', desc: 'Get ranked mitigation, transfer, and acceptance strategies — with implementation effort, residual risk, and control coverage for each.', panel: { title: 'Lack of Data Loss Prevention Controls', kind: 'Treatment Options', body: [ { type: 'section', text: 'RECOMMENDED · MITIGATE' }, { type: 'rec', tint: '#22c55e', h: 'Deploy endpoint DLP agent', meta: ['Effort: Medium', 'Residual: 3', 'Coverage: 6 controls'] }, { type: 'section', text: 'ALTERNATIVE · MITIGATE' }, { type: 'rec', tint: '#38bdf8', h: 'Email-gateway PHI scanning', meta: ['Effort: Low', 'Residual: 5', 'Coverage: 2 controls'] }, { type: 'section', text: 'TRANSFER' }, { type: 'rec', tint: '#eab308', h: 'Cyber-liability rider for data-exfil events', meta: ['Effort: Low', 'Financial offset only'] }, ], }, }, { id: 'mapping', tag: 'CONTROL_MAPPING', label: 'Control Mapping', tint: '#38bdf8', desc: 'Map any risk to applicable HIPAA controls, flag which are Required vs Addressable, and identify gaps in your current program.', panel: { title: 'Lack of Data Loss Prevention Controls', kind: 'Control Mapping', body: [ { type: 'section', text: 'REQUIRED CONTROLS (3)' }, { type: 'ctrl', id: '164.312(a)(2)(i)', name: 'Unique User Identification', req: 'REQUIRED', tint: '#f87171', why: 'Enables detection of unauthorized access and exfiltration.' }, { type: 'ctrl', id: '164.312(b)', name: 'Audit Controls', req: 'REQUIRED', tint: '#f87171', why: 'Mandatory logging to detect and investigate data-loss incidents.' }, { type: 'ctrl', id: '164.310(c)', name: 'Workstation Security', req: 'REQUIRED', tint: '#f87171', why: 'Prevents unauthorized workstation use for exfiltration.' }, { type: 'section', text: 'ADDRESSABLE (1)' }, { type: 'ctrl', id: '164.312(e)(2)(ii)', name: 'Encryption in Transit', req: 'ADDRESSABLE', tint: '#eab308', why: 'Mitigates exfil via unencrypted channels.' }, ], }, }, { id: 'reference', tag: 'HIPAA_REFERENCE', label: 'HIPAA Reference', tint: '#eab308', desc: 'Every answer cites regulations directly — 45 CFR sections, OCR guidance, and NIST CSF 2.0 mappings. No invented references.', panel: { title: 'Lack of Data Loss Prevention Controls', kind: 'HIPAA Reference', body: [ { type: 'section', text: '45 CFR § 164.308(a)(1)(ii)(A)' }, { type: 'quote', text: 'Conduct an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information…' }, { type: 'section', text: 'OCR GUIDANCE · 2024-06-12' }, { type: 'p', text: 'The Office for Civil Rights emphasized that DLP is considered a reasonable safeguard under the Security Rule where risk analysis identifies material exfiltration exposure.' }, { type: 'section', text: 'NIST CSF 2.0 CROSSWALK' }, { type: 'chips', items: ['PR.DS-01', 'PR.DS-02', 'DE.CM-01', 'DE.CM-03'] }, ], }, }, ]; // ─── Render helpers for panel body ──────────────────────────────── const PanelBody = ({ blocks }) => { const mono = { fontFamily: "'JetBrains Mono', ui-monospace, monospace" }; return (
{blocks.map((b, i) => { if (b.type === 'section') return (
{b.text}
); if (b.type === 'p') return (
{b.text}
); if (b.type === 'quote') return (
"{b.text}"
); if (b.type === 'chips') return (
{b.items.map(c => ( {c} ))}
); if (b.type === 'stat-row') return (
{b.items.map(s => (
{s.k.toUpperCase()}
{s.v}
))}
); if (b.type === 'rec') return (
{b.h}
{b.meta.map(m => ( {m} ))}
); if (b.type === 'ctrl') return (
§ {b.id}
{b.name}
{b.why}
{b.req}
); return null; })}
); }; const FeaturesSection = () => { const mono = { fontFamily: "'JetBrains Mono', ui-monospace, monospace" }; const { SectionLabel, SectionH, SectionSub } = window; const [active, setActive] = React.useState(0); const tab = TAB_DATA[active]; return (
{/* soft atmosphere tinted by active tab */}
Four ways to get an answer. One AI that knows your program. CTRL Assist isn't a generic chatbot. It's embedded in every risk, control, incident, and policy in your workspace — with de-identified context, live citations, and four specialized analysis modes.
{/* Tab strip */}
{TAB_DATA.map((t, i) => { const isActive = i === active; return ( ); })}
{/* Response panel */}
{/* Panel header */}
CTRL_ASSIST · {tab.tag}
{tab.panel.title}
DE-IDENTIFIED
{/* Footer */}
RESPONSE_TIME: 2.4s · MODEL: ctrl-assist-v1 ↗ export · ↗ save to workspace
{/* Platform modules row */}
— PLUS THE FULL CTRL PLATFORM
{[ { n: 'Risk Register', d: 'Inherent/current/target scoring with automated controls mapping.' }, { n: 'Policy Library', d: '200+ HIPAA-aligned policy templates with version control.' }, { n: 'Incident Response', d: '4-factor breach assessments with 60-day clock tracking.' }, { n: 'Vendor / BAA', d: 'Lifecycle tracking with expiration alerts and subprocessor maps.' }, { n: 'Workforce Training', d: 'Role-based curricula, attestations, and completion reporting.' }, { n: 'Audit Evidence', d: 'OCR Phase 2 protocol-aligned evidence collection and export.' }, ].map(m => (
{m.n}
{m.d}
))}
); }; window.FeaturesSection = FeaturesSection;