Translation Implementation using i18n

common/compliance-requirements/gdpr-requirements.ts

@@ -9,25 +9,103 @@
  *
  * Find more information about this on the LICENSE file.
  */
+ import { i18n } from '@kbn/i18n';
+
+ const sharingProtection = i18n.translate(
+   'wazuh.complianceRequirements.gdpr.sharingProtection',
+   {
+     defaultMessage:
+       'Ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services, verifying its modifications, accesses, locations and guarantee the safety of them.File sharing protection and file sharing technologies that meet the requirements of data protection.',
+   },
+ );
+
+  const restrictPersonalDataSharing = i18n.translate(
+    'wazuh.complianceRequirements.gdpr.restrictPersonalDataSharing',
+    {
+      defaultMessage: ' Restrict the processing of personal data temporarily.',
+    },
+  );
+
+  const personalInfoErase = i18n.translate(
+    'wazuh.complianceRequirements.gdpr.personalInfoErase',
+    {
+      defaultMessage: ' Permanently erase personal information of a subject.',
+    },
+  );
+
+  const dataProtectionPolicy = i18n.translate(
+    'wazuh.complianceRequirements.gdpr.dataProtectionPolicy',
+    {
+      defaultMessage:
+        'Be able to demonstrate compliance with the GDPR by complying with data protection policies.',
+    },
+  );
+
+  const ensureDatProtection = i18n.translate(
+    'wazuh.complianceRequirements.gdpr.ensureDatProtection',
+    {
+      defaultMessage:
+        ' Ensure data protection during processing, through technical and organizational measures.',
+    },
+  );
+
+  const dataLocation = i18n.translate(
+    'wazuh.complianceRequirements.gdpr.dataLocation',
+    {
+      defaultMessage:
+        'It is necessary to keep all processing activities documented, to carry out an inventory of data from beginning to end and an audit, in order to know all the places where personal and sensitive data are located, processed, stored or transmitted.',
+    },
+  );
+
+  const dataLossPrevention = i18n.translate(
+    'wazuh.complianceRequirements.gdpr.dataLossPrevention',
+    {
+      defaultMessage:
+        'Data Loss Prevention (DLP) capabilities to examine data flows and identify personal data that is not subject to adequate safeguards or authorizations. DLP tools can block or quarantine such data flows. Classify current data appropriately to determine specific categories of data that will be subject to the GDPR.',
+    },
+  );
+
+  const accountManagementTools = i18n.translate(
+    'wazuh.complianceRequirements.gdpr.accountManagementTools',
+    {
+      defaultMessage:
+        'Account management tools that closely monitor actions taken by standard administrators and users who use standard or privileged account credentials are required to control access to data. ',
+    },
+  );
+
+  const supervisorAuthority = i18n.translate(
+    'wazuh.complianceRequirements.gdpr.supervisorAuthority',
+    {
+      defaultMessage:
+        ' Notify the supervisory authority of a violation of the data in 72 hours and in certain cases, the injured parties.',
+    },
+  );
+
+  const technicalMeasures = i18n.translate(
+    'wazuh.complianceRequirements.gdpr.technicalMeasures',
+    {
+      defaultMessage:
+        'Perform a data protection impact evaluation for high risk processes. Implement appropriate technical measures to safeguard the rights and freedoms of data subjects, informed by an assessment of the risks to these rights and freedoms.',
+    },
+  );
+
+  const employeeAlert = i18n.translate(
+    'wazuh.complianceRequirements.gdpr.employeeAlert',
+    {
+      defaultMessage:
+        'Capabilities for identification, blocking and forensic investigation of data breaches by malicious actors, through compromised credentials, unauthorized network access, persistent threats and verification of the correct operation of all components.Network perimeter and endpoint security tools to prevent unauthorized access to the network, prevent the entry of unwanted data types and malicious threats. Anti-malware and anti-ransomware to prevent malware and ransomware threats from entering your devices.A behavioral analysis that uses machine intelligence to identify people who do anomalous things on the network, in order to give early visibility and alert employees who start to become corrupt.',
+    },
+  );
 export const gdprRequirementsFile = {
-  'II_5.1.f':
-    'Ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services, verifying its modifications, accesses, locations and guarantee the safety of them.File sharing protection and file sharing technologies that meet the requirements of data protection.',
-  'III_14.2.c': ' Restrict the processing of personal data temporarily.',
-  III_17: ' Permanently erase personal information of a subject.',
-  'IV_24.2':
-    'Be able to demonstrate compliance with the GDPR by complying with data protection policies.',
-  IV_28:
-    ' Ensure data protection during processing, through technical and organizational measures.',
-  'IV_30.1.g':
-    'It is necessary to keep all processing activities documented, to carry out an inventory of data from beginning to end and an audit, in order to know all the places where personal and sensitive data are located, processed, stored or transmitted.',
-  'IV_32.1.c':
-    'Data Loss Prevention (DLP) capabilities to examine data flows and identify personal data that is not subject to adequate safeguards or authorizations. DLP tools can block or quarantine such data flows. Classify current data appropriately to determine specific categories of data that will be subject to the GDPR.',
-  'IV_32.2':
-    'Account management tools that closely monitor actions taken by standard administrators and users who use standard or privileged account credentials are required to control access to data. ',
-  IV_33:
-    ' Notify the supervisory authority of a violation of the data in 72 hours and in certain cases, the injured parties.',
-  'IV_35.1':
-    'Perform a data protection impact evaluation for high risk processes. Implement appropriate technical measures to safeguard the rights and freedoms of data subjects, informed by an assessment of the risks to these rights and freedoms.',
-  'IV_35.7.d':
-    'Capabilities for identification, blocking and forensic investigation of data breaches by malicious actors, through compromised credentials, unauthorized network access, persistent threats and verification of the correct operation of all components.Network perimeter and endpoint security tools to prevent unauthorized access to the network, prevent the entry of unwanted data types and malicious threats. Anti-malware and anti-ransomware to prevent malware and ransomware threats from entering your devices.A behavioral analysis that uses machine intelligence to identify people who do anomalous things on the network, in order to give early visibility and alert employees who start to become corrupt.'
+  'II_5.1.f': sharingProtection,
+  'III_14.2.c': restrictPersonalDataSharing,
+  III_17: personalInfoErase,
+  'IV_24.2': dataProtectionPolicy,
+  IV_28: ensureDatProtection,
+  'IV_30.1.g': dataLocation,
+  'IV_32.1.c': dataLossPrevention,
+  'IV_32.2': accountManagementTools,
+  IV_33: supervisorAuthority,
+  'IV_35.1': technicalMeasures,
+  'IV_35.7.d': employeeAlert,
 };

common/compliance-requirements/hipaa-requirements.ts

@@ -9,29 +9,94 @@
  *
  * Find more information about this on the LICENSE file.
  */
-export const hipaaRequirementsFile = {
-  '164.312.a.1':
+import { i18n } from '@kbn/i18n'
+
+const technicalPolicies = i18n.translate('wazuh.complianceRequirements.hipaa.technicalPolicy', {
+  defaultMessage:
     'Implement technical policies and procedures for electronic information systems that maintain electronic protected health information to allow access only to those persons or software programs that have access.',
-  '164.312.a.2.I':
+});
+const uniqueName = i18n.translate('wazuh.complianceRequirements.hipaa.uniqueName', {
+  defaultMessage:
     'Assign a unique name and/or number for identifying and tracking user identity.',
-  '164.312.a.2.II':
+});
+const healthInformation = i18n.translate('wazuh.complianceRequirements.hipaa.healthInformation', {
+  defaultMessage:
     'Establish (and implement as needed) procedures for obtaining necessary electronic protected health information during an emergency.',
-  '164.312.a.2.III':
-    'Implement electronic procedures that terminate an electronic session  after a predetermined time of inactivity.',
-  '164.312.a.2.IV':
-    'Implement a mechanism to encrypt and decrypt electronic protected health information.',
-  '164.312.b':
-    'Implement hardware, software, and/or procedural mechanisms that record and examine activity in information systems that contain or use electronic protected health information.',
-  '164.312.c.1':
-    'Implement policies and procedures to protect electronic protected health information from improper alteration or destruction.',
-  '164.312.c.2':
-    'Implement electronic mechanisms to corroborate that electronic protected health information has not been altered or destroyed in an unauthorized manner.',
-  '164.312.d':
+  },
+);
+const electronicProcedure = i18n.translate(
+  'wazuh.complianceRequirements.hipaa.electronicProcedure',
+  {
+    defaultMessage:
+      'Implement electronic procedures that terminate an electronic session  after a predetermined time of inactivity.',
+  },
+);
+const encryptAndDecryptHealthInfo = i18n.translate(
+  'wazuh.complianceRequirements.hipaa.encryptAndDecryptHealthInfo',
+  {
+    defaultMessage:
+      'Implement a mechanism to encrypt and decrypt electronic protected health information.',
+  },
+);
+const hardwareAndSoftwareMechanism = i18n.translate(
+  'wazuh.complianceRequirements.hipaa.hardwareAndSoftwareMechanism',
+  {
+    defaultMessage:
+      'Implement hardware, software, and/or procedural mechanisms that record and examine activity in information systems that contain or use electronic protected health information',
+  },
+);
+const protectFromAlterationOrDestruction = i18n.translate(
+  'wazuh.complianceRequirements.hipaa.protectFromAlterationOrDestruction',
+  {
+    defaultMessage:
+      'Implement policies and procedures to protect electronic protected health information from improper alteration or destruction.',
+  },
+);
+const electronicMechanismsToProtectFromAlteration = i18n.translate(
+  'wazuh.complianceRequirements.hipaa.electronicMechanismsToProtectFromAlteration',
+  {
+    defaultMessage:
+      'Implement electronic mechanisms to corroborate that electronic protected health information has not been altered or destroyed in an unauthorized manner.',
+  },
+);
+const seekAccess = i18n.translate('wazuh.complianceRequirements.hipaa.seekAccess', {
+  defaultMessage:
     'Implement procedures to verify that a person or entity seeking access to electronic protected health information is the one claimed.',
-  '164.312.e.1':
-    'Implement technical security measures to guard against unauthorized access to electronic protected health information that is being transmitted over an electronic communications network.',
-  '164.312.e.2.I':
+  },
+);
+
+const technicalSecurityMeasures = i18n.translate(
+  'wazuh.complianceRequirements.hipaa.technicalSecurityMeasures',
+  {
+    defaultMessage:
+      'Implement technical security measures to guard against unauthorized access to electronic protected health information that is being transmitted over an electronic communications network.',
+  },
+);
+
+const securityDetection = i18n.translate('wazuh.complianceRequirements.hipaa.securityDetection', {
+  defaultMessage:
     'Implement security measures to ensure that electronically transmitted electronic protected health information is not improperly modified without detection until disposed of.',
-  '164.312.e.2.II':
-    'Implement a mechanism to encrypt electronic protected health information whenever deemed appropriate.'
+});
+
+const deemedAppropriate = i18n.translate(
+  'wazuh.complianceRequirements.hipaa.deemedAppropriate',
+  {
+    defaultMessage:
+      'Implement a mechanism to encrypt electronic protected health information whenever deemed appropriate.',
+  },
+);
+
+export const hipaaRequirementsFile = {
+  '164.312.a.1': technicalPolicies,
+  '164.312.a.2.I': uniqueName,
+  '164.312.a.2.II': healthInformation,
+  '164.312.a.2.III': electronicProcedure,
+  '164.312.a.2.IV': encryptAndDecryptHealthInfo,
+  '164.312.b': hardwareAndSoftwareMechanism,
+  '164.312.c.1': protectFromAlterationOrDestruction,
+  '164.312.c.2': electronicMechanismsToProtectFromAlteration,
+  '164.312.d': seekAccess,
+  '164.312.e.1': technicalSecurityMeasures,
+  '164.312.e.2.I': securityDetection,
+  '164.312.e.2.II': deemedAppropriate,
 };