From 086ea2ffc10d60ef3df5990b8a15ec8687d1bb78 Mon Sep 17 00:00:00 2001 From: eric-intuitem <71850047+eric-intuitem@users.noreply.github.com> Date: Fri, 29 Nov 2024 10:48:32 +0100 Subject: [PATCH] Add ebios-rm matrix (#1098) Co-authored-by: Abderrahmane Smimite --- .../libraries/risk-matrix-4x4-ebios-rm.yaml | 174 ++++++++++++++++++ .../{3x3-mult => }/risk-matrix-3x3-mult.xlsx | Bin tools/matrix/risk-matrix-4x4-ebios-rm.xlsx | Bin 0 -> 14082 bytes .../risk-matrix-4x4-with-5-levels.xlsx | Bin .../risk-matrix-5x5-iso-27005.xlsx | Bin .../risk-matrix-5x5-sensitive.xlsx | Bin 6 files changed, 174 insertions(+) create mode 100644 backend/library/libraries/risk-matrix-4x4-ebios-rm.yaml rename tools/matrix/{3x3-mult => }/risk-matrix-3x3-mult.xlsx (100%) create mode 100644 tools/matrix/risk-matrix-4x4-ebios-rm.xlsx rename tools/matrix/{4x4-with-5-levels => }/risk-matrix-4x4-with-5-levels.xlsx (100%) rename tools/matrix/{5x5-iso-27005 => }/risk-matrix-5x5-iso-27005.xlsx (100%) rename tools/matrix/{5x5-sensitive => }/risk-matrix-5x5-sensitive.xlsx (100%) diff --git a/backend/library/libraries/risk-matrix-4x4-ebios-rm.yaml b/backend/library/libraries/risk-matrix-4x4-ebios-rm.yaml new file mode 100644 index 000000000..f6e0fcf06 --- /dev/null +++ b/backend/library/libraries/risk-matrix-4x4-ebios-rm.yaml @@ -0,0 +1,174 @@ +urn: urn:intuitem:risk:library:risk-matrix-4x4-ebios-rm +locale: en +ref_id: risk-matrix-4x4-ebios-rm +name: 4x4 risk matrix from EBIOS-RM +description: based on the official guide of the EBIOS RM approach +copyright: public domain +version: 1 +provider: intuitem +packager: intuitem +translations: + fr: + name: Matrice 4x4 EBIOS-RM + description: "Bas\xE9e sur le guide officiel de la m\xE9thode EBIOS RM" +objects: + risk_matrix: + - urn: urn:intuitem:risk:matrix:risk-matrix-4x4-ebios-rm + ref_id: risk-matrix-4x4-ebios-rm + name: 4x4 risk matrix from EBIOS-RM + description: based on the official guide of the EBIOS RM approach + probability: + - id: 0 + abbreviation: V1 + name: V1 - Implausible + description: The source of risk is unlikely to achieve its intended objective + under any of the proposed procedures. The likelihood of the scenario is weak. + translations: + fr: + name: V1 - Peu vraisemblable + description: "La source de risque a peu de chances d\u2019atteindre son\ + \ objectif vis\xE9 selon l\u2019un des modes op\xE9ratoires envisag\xE9\ + s. La vraisemblance du sc\xE9nario est faible." + hexcolor: '#FAF7E9' + - id: 1 + abbreviation: V2 + name: V2 - Plausible + description: ' The source of risk is likely to achieve its intended objective + according to one of the operating procedures envisaged. The likelihood of + the scenario is significant. ' + translations: + fr: + name: V2 - Vraisemblable + description: "La source de risque est susceptible d\u2019atteindre son objectif\ + \ vis\xE9 selon l\u2019un des modes op\xE9ratoires envisag\xE9s. La vraisemblance\ + \ du sc\xE9nario est significative." + hexcolor: '#EEE6BC' + - id: 2 + abbreviation: V3 + name: V3 - Very likely + description: The risk source is very likely to achieve its intended objective + through one of the anticipated methods of operation. The likelihood of the + scenario is high. + translations: + fr: + name: "V3 - Tr\xE8s vraisemblable" + description: "La source de risque va probablement atteindre son objectif\ + \ vis\xE9 selon l\u2019un des modes op\xE9ratoires envisag\xE9s. La vraisemblance\ + \ du sc\xE9nario est \xE9lev\xE9e." + hexcolor: '#DCCC77' + - id: 3 + abbreviation: V4 + name: V4 - Certain + description: The risk source will certainly achieve its intended objective through + one of the anticipated methods of operation OR such a scenario has already + occurred within the organization (incident history). + translations: + fr: + name: V4 - Certain + description: "La source de risque va certainement atteindre son objectif\ + \ vis\xE9 selon l\u2019un des modes op\xE9ratoires envisag\xE9s OU un\ + \ tel sc\xE9nario s\u2019est d\xE9j\xE0 produit au sein de l\u2019organisation\ + \ (historique d\u2019incidents)." + hexcolor: '#C4AA00' + impact: + - id: 0 + abbreviation: G1 + name: G1 - Minor + description: 'No operational impact on the performance of the activity or on + the safety of people and property. ' + translations: + fr: + name: G1 - Mineur + description: "Aucun impact op\xE9rationnel ni sur les performances de l\u2019\ + activit\xE9 ni sur la s\xE9curit\xE9 des personnes et des biens." + hexcolor: '#42C7C4' + - id: 1 + abbreviation: G2 + name: G2 - Significant + description: 'Deterioration in the performance of the activity without impact + on the safety of people and property. ' + translations: + fr: + name: G2 - Significatif + description: "D\xE9gradation des performances de l\u2019activit\xE9 sans\ + \ impacts sur la s\xE9curit\xE9 des personnes et des biens." + hexcolor: '#FBF082' + - id: 2 + abbreviation: G3 + name: G3 - Important + description: 'Sharp deterioration in the performance of the activity, with possible + significant impacts on the safety of people and property. ' + translations: + fr: + name: G3 - Important + description: "Forte d\xE9gradation des performances de l\u2019activit\xE9\ + , avec d\u2019\xE9ventuels impacts significatifs sur la s\xE9curit\xE9\ + \ des personnes et des biens." + hexcolor: '#FFC586' + - id: 3 + abbreviation: G4 + name: G4 - Critique + description: Inability for the company to carry out all or part of its activity, + with possible serious impacts on the safety of people and property. + translations: + fr: + name: G4 - Critique + description: "Incapacit\xE9 pour la soci\xE9t\xE9 d\u2019assurer tout ou\ + \ partie de son activit\xE9, avec d\u2019\xE9ventuels impacts graves sur\ + \ la s\xE9curit\xE9 des personnes et des biens." + hexcolor: '#EE7B86' + risk: + - id: 0 + abbreviation: '1' + name: Low + description: Acceptable as is. + translations: + fr: + name: Faible + description: "Acceptable en l'\xE9tat" + hexcolor: '#59BBB2' + - id: 1 + abbreviation: '2' + name: Medium + description: Tolerable under control. Risk management monitoring must be conducted, + and actions should be implemented as part of continuous improvement in the + medium and long term. + translations: + fr: + name: Moyen + description: "Tol\xE9rable sous contr\xF4le. Un suivi en termes de gestion\ + \ du risque est \xE0 mener et des actions sont \xE0 mettre en place dans\ + \ le cadre d\u2019une am\xE9lioration continue sur le moyen et long terme." + hexcolor: '#F5C481' + - id: 2 + abbreviation: '3' + name: High + description: Unacceptable. Risk reduction measures must be implemented urgently + in the short term. Otherwise, all or part of the activity will be denied. + translations: + fr: + name: "\xC9lev\xE9" + description: "Inacceptable. Des mesures de r\xE9duction du risque doivent\ + \ imp\xE9rativement \xEAtre prises \xE0 court terme. Dans le cas contraire,\ + \ tout ou partie de l\u2019activit\xE9 sera refus\xE9e." + hexcolor: '#E6686D' + grid: + - - 0 + - 0 + - 1 + - 1 + - - 0 + - 0 + - 1 + - 2 + - - 0 + - 1 + - 2 + - 2 + - - 1 + - 1 + - 2 + - 2 + translations: + fr: + description: "Bas\xE9e sur le guide officiel de la m\xE9thode EBIOS RM" diff --git a/tools/matrix/3x3-mult/risk-matrix-3x3-mult.xlsx b/tools/matrix/risk-matrix-3x3-mult.xlsx similarity index 100% rename from tools/matrix/3x3-mult/risk-matrix-3x3-mult.xlsx rename to tools/matrix/risk-matrix-3x3-mult.xlsx diff --git a/tools/matrix/risk-matrix-4x4-ebios-rm.xlsx b/tools/matrix/risk-matrix-4x4-ebios-rm.xlsx new file mode 100644 index 0000000000000000000000000000000000000000..590d98cd87f17dbc660b0c6180fb073b189579c1 GIT binary patch literal 14082 zcmeHuWmFtn+HT_-+#x^+?(Xgq+}+*XT>=Dm5AK%6-Q6L$I|O%!%Q-XmJ7+R;|KGK~ zsa~tPdUZWdRqc9xzgtcU3>*yr34jIw0G|NGDJ3g5AOJuj1OR{vfCkkRvbAwCwsF!` zap zgK2pZV)zUhl0SQsL6(+E3P9)E7?5N&-MMY0Zn{}Z{|E?OYDv2(!>8($sH#n$KlXmq zTKfSSZzqX$mTiK|&x)_D`=KZupe9$}lg2_3>^Uyast2LM>z9|A8m&U?5$T8@q!r3> zE>Pt_D5HDe zX8RGK&ZP}n2A8*1PZeLja!d$0U%xBj+Zz}_?qAdtRj1t;^j%HY-?b3#T}^czjIA8$ zX#d#%S3Un1>*U`ay*y4@3XB0MZP#}3OU|EH1b%y+n>m)^r-BH zDUxzGXW@o7ynHJ+h?eBd56f9hr7wV|Nz0sFEzto><6082lte3W_hZO9j@%e?-?%t5 zmm^p%?|th-D=V9HmHCK=?NGsIs+dCI@fh{{m_@-~S1h?IIR(UB)jq?Ap~Fu^hG6() z8ZX}u&Mc=C6huja)4($K9*)@|YFqO~98rB&QboP?>022Qi_~oBhH~#1e()HMt4^?? zjIRM7-$&u!Rfa}fB&7lj0HB5e01)5LaI>OwwRNyGu(h@P!>g4mTifQbBfa`ezd-f6 zT3lg(QmPApHcOtA4x22u$R>ix7@*sYvr6Y$ygfxph|i22CY;bp!qM&6;j&-=ae7I>93rNA!O~aY4sBc_SNTLc9lsLHuDQvJ#ZW}jc zX}H>8w{Cp`oBau|%Zvg!)%?1h=%Nb3Mzm*P8rT)Z2B_YN{P?l%5)h@XB;Eq$@-&l` z$O*?Nl33_p9KMMUIenm_xo)~RJZU;gET95(}-6zj+hnFQd^tfmq1|O>Oqfrt;VN);;Q!p9}5m48dAd^H6aDQX5Il87^<>N^^SyIPG(@Bd4ab2}*HgeuhI$D4eAQm^z5nQq7WP zu7ea1vgIBLKcR{4)FaI`dZ+T7ea=qvEhEkv^qGV#79i|a4Q2Yg`7vW@s$sku6&d1wDovn5Lk_5aX$v3Kpp z0YHPiYxY0<;otT9|N2Id_t5p-asKb#TI0qndg0Q>X)JD zf1rGowlXZ?bAL)pIAyKQPoB&pX1-z=HF@H=-un32d5wY`hzH)hls;Yut8*u-dPf*q z$JBg>fF2=UT|rC7IjOXZU~9e3tQ{HM?t?pdfekkl1{a?lMFR{lf7ZcJ2ZeCY z%F&A7>=^)47v{CcQzb5vY64e$W*RkMY_RN(nMEFh8&KlqEMU^4BXO*ugpc37X`5!Sl|GF^#=d|>s=)N=@T5yjE$Wf>Hhp;_`^A5#B1B8)1!r) zk)80VwUg;diiZo95`WM*D|9B9@5c*3k6>DUSgL(%H=HI;BvMu;>Fl@5y2JZEAOAJb zVhAB3v3Z07S2%&6%!#B$S;p6kE`Wh#?xJ$5;*_vRtomC2@nOcOYHW!W5Ji|%!(pAV zY@}}{0v5jPzsCPn*TNdj_1;1yXBBHhnIM0OJ}Q@4Nz3J0cyQDctGTkkPmHD>meVx= z%dDyA+4?iv?H9!@9`?R5j~199mG_GR6Hga}DCCJeHJq2ufql)0)SCf#@Hz}@uBNFz zFQO6>`n9ulxP%a1i`otaot4v2&BS3(3RiAwmcD1w{O4 zYqekf*kQ(psjCi8Wj?W?^V|mypE){@XkV869Sn@-7ZR%ZZ0f86Sc`V+RkpS_P={G| zEopnY)>PoHduWyHZw#pd$HqZ6v0<{g`FxRPf<6ZWFEH2xV51e_N3e(L3859v8ky+2 zghh78dIVA1QtXCSozujUhPpXix9L};V7T*4cHB%`R9h#)-R&7~@8a?Hk6l8NrA;6` zQczWZmtQx|B_WZxv?H=`>?2hLsAT%GX|j@zr?tkdE`Htv=-5MIMn)3+D^#Jy z&cay_rlOa~*fU=>sQikZ`Ln{wV!Tv9a^#RCMwgLKc-3LZtK{q|vwz`s*p;umEn2Kb z`4u{fkE$D^kE$Hqf-~O;85AY~wYMQPme41akiweu@;oCo2g4IR;67sDfH9MZ7@YPU z%x!0tVrYOdi-;H$iZ)~&lm?q3+#3hyUEiV3+Lmz+}sB~1n7Cc5Oi`FC^P^Yr& z^P&6^v;Ff0a7PHhcJsrFRG~Nks6s<04~Hwtvh;pBk*cM~6vFbfDeAAh-0`-m80K2m z_Rhe6{(x`S!SxBNNUP!7>oM{s>FH%@0tN3ND<>g5kxtIxQpIvS9V|{_`F5<=3>F3oH9i64dwZ;J`UJO-R&e24jb z11+S2USvgkC{sO`@hP08m;bGKPjht!+#8%Mbm_PrjIs{{iE7Qx(LpW({9{|WX31cw ze^a!+AUP+co5*>TC${UGsDxc|+ z(Oa-VAVYhy8cHi}7$Z=zn4F(*YTkSUZDci5tCd^>zoR`g*WaJ=O6b?6G+CYYmpD zn@9|VU6;hCj$DeFz_lEaLO&8;Y{Biwd}7~${p1pSsJt2YYqBVi|CmtUM`UVm=h)p1 zhn;&MaN#0Eh)z15uug1xa|7|$xKu-ngzCT&g9jfc8LbNcWrqMhcT}}&59tel zex$A6y8-=gW++4LBx;Et-U~eeihPGFgFPPw1$Ib^Fx;u5a@ODM>GsBi#)ZccrHjwT zI=YQ%E%Ht!Ir{3MnMWu3Xm-AeucqpbJjx__eP9Ca#p7GN*{ywnt}*iyuIa$c@`Ug5 z)vnWPeqUb$u||~)=^huv)Nt@?d&RaJOGkz36)G-UJHt@^4~%{VoCZ+V*#3Sr&V(bz zqUnM<+C*Kvopp80r6QprlHq9c|^#7{BA3pbNXB06#ePBM2D=F{Vfdpd2nYw zq2L_Rn;aKXo%IZV+ihddkuNn%FhRwUk2zBQDZVOieHkOF>@+`E2_4Dr7ZT_dNvLV5 z9VEH|G)(Z)^8ms5A&+i1A*!9nU|6JtP%-m05wlV(Sd>`IE{c>TH+ul5WVu2bf7Oc zWxj)aI`^48&<-xBZ=oZ{&mP_MrmD%xFtAgvYd)miLV2IqWy%y2CFbCJ{{-DPHlX{g|vMReVT{T0jSzgB-OFqF6zJKF`ep)Qf>7$3ZNXBjy zlg_1tlwGk2fiExh1%@F31JFMzGX#vcEkKdiEp$@eeUro>S2Xn7Y>Sn+NUt%z{cRs{ zXkfHjkN)eV3Z$&Ww`~GHSnva8yz|3FF|Q+S%aN#=EW7x;BKMkTBvS(WNsKxe#vr(T;cVWhpsuM8vxi^Khs4_(Vey6Xw8U4_VS}$z>sh zO`|AmS@C&I)I)EFv+d~9Eim-h6v7zU9gtIxScOA@I!aUeh~1A_ao|3hcF2Yh4F>9& za9%JThAJPtJJcf?q`4C|uzvDtP#;8Ohp8N{E|U{5G)gD@1Y;r{ueC6cz&d{Bo`h~n z0wbM-FwsWbOT8L_X;Q#9P@}xhIeOTeC|hgM?1O4TQuH*EaxlC~9@z!Gx|$rNNSZmx zeKy2SvdPi-3nrSzlYGy`>U=yHkd6tbZW;7bJePD zc?_>Dn3|o-shex8a2;pw928=zI+B*BFM!NKx4iEj8`BVAM%WWhDqf)o>|_ev(kX2e z7NS%Pna7v3?K(vZanfgr=3S)aevHg*WFF9|xCKp7#W3w4vyIw<;L}(BDI@81~C2f@c7T zH(DfcvMNKhWS`RlV6(k8pJL!pFHzYpcaCt(K8-C+p6y<6C+yA7y}W9K_XNov;) zUSw{6aMeO3@X%Ld61?_S*~T{fc`N@gs*!79E93dB?D2zxsw5RN0_5&t7*Tl zI%x;MH~oMozGbT)181@fAkrgE$^ER_41qlI5*)gw8o4k`(NK+Py$MMkQSL!jICK>L z9hDlqBYKBaTMbeC8U63M2Z`dDn%7bOSj26NtuEkoXk zrOd*P9aGW-HS}#CFdW%M_S#aV5S#i-fiYX5)oSfDm7@^9q&AqaX(QIKv_N4?rh6Qe zX2)9}H77jkC5@MUWv)Vig=ST!CtE1Bn_D87V)VUr-I+pRfYtQ06ev9A8ov+ zKD9iw!;(ue>!m`dl8C@CNtAtEVR(@{F#UtE)WC|hwOsSacWn4(%kD#kv+A?flXjn~ zxg@IF0hu4>8s;Ll>8DnYn=TJ1Wd@jaYQ{}Z9^)rgaUa1;9n;CSx}i& zKUoa$s2LHdfoMS=A6~G$DWz#mT)?Zb36{2;64BJQmig&iVPi6fFp{;DuWv}vxKu|} zI|LCj&A~M~=0LZTN|mU(WEZRw;L^7K7^&lp#0rVtv5KYqtFBqsoXw+7vTCXrB2RP! z@o96PUsl9^a!~TA0V~tdQM0pP)A>y7Kc)Y??tFrYyjZB4)sS7%F)T) z%GmLbTyaNT_m61_U%tb3u&vC?B7Q+MAS|&s)rm4$9ocG`&=-S>u2_2wVA0bl8!M9d za+~!u4d&q`3ikq22lhn7K+m;eqT&hiRa`aE&l6m!dAnF33k7S=>wu6!gmVR2vD)Wh zSiE0QTED)Vbi6Xs^!aZ+(ew*~VTfS=(){FtIzv4}GcNDm7-1eCG_=K7`<1NVhH0lxYaNX_?qn*O$12F8m{X@53MmVP0wlEzWq@xJJ zR(QQx$J9Pa(ilGp1~r567r>C}!rdwnU!ot|F6cVP9qH6}Wt5H1WH?@~LiP%D0 z>NmbR-6J>EqE}a~jxdnWVl+h$I`7ws@-oiOtFkXtx9)M@ChT$p_eX%m-a&b-?&U(o z_=A(b9LwDA76fCox>d`7d45;&A5|^Q8uGq!kfak0Fou)h{6wgu+1|lDAh(n{oG9fl z1-gRp3K_x1*lGLe5M5)0@AXU8O^TC9mh8xR1m?ft1hjH`<)g1`(Ab~D_pI{j>Sq-{ z899n!PkyT-i*iA1RCuNRd~K-xh-bb*f2nXTN$PGQ;11Q=8&5a;aiw^~l8#79r<0Qz zvv2XC3xS+doNncrjGvQjw`m@7u!WWXwGISF`@5!4@@ex54$8AL2r%cmnNc{Vp$dL# z5=JwzNp9h`bU%LSK@GwZh>QKp_42%^ZOf>R46QP*>gQOeqqcKmqXjGUB9;ovqdcrz zAC9S+Y+uiXak1+}$0p0-zFxA)+}TbnOdrwDmVLU*N~^N|G>iOz^Ncg)blG2Xws#~0 zmQOJ5O;%h`WIL7a_JXI6WbX%wZj_e`iyR~b>HZTjwcahL4)fuh#tz3JsXUQmbFgxB z-V~dXaBoXl@p5mL*pUH!jP?;f&?7(GVR(veh`{wYZkzoO2Oasb)!{kz=vw=0wgIBi zb>TEWe{ynvY>rLSeSJ!>jjfnXQCkz>Lg2Y^Ketjt^SPRn%&GcEp*{zxl+64+(f0{8xH4euTZbURp)TtB548_R}-}f|MZ(h+y|PpQ3#e) zw=CScky~wA-R)na`%{6cs4NVLVc&9C3T+a`yEmoXc(f=CtK@{%TANHPRJE;6yz02x zmZ@AGT6laT&zkl#5(UlF5KrbS9n^=<;8j;YBCNDjN_M0_p52YvHdR|L;@i5?BO##<|>IO?1nl0ssg%5cI3f}tSRF$T0{V)4TFc*!NI!`X202Ks!W$|14J;5DK9wv zlIEd0qpHj8@%X&47@wmqn}5w5Z?)90cZ~3H64kJ2Y`Q6H7}eVaGd(Lkl|?ZxajetM znK$il5?JHOz9GNLj%YF7Kwx+)Wt)3`Xm_+=~2oq*TZ|! zFncdguk8EsOeJTzM_QSb9vt3nQKGpLB!K2;1vjqoJizeb3;ePjd+lbI1;ovyL@ov|)`%j?#O3!&mwy|kUl$gkBH2d&NyA~rE&KR);zUC{R%g~D%AZqO6 zpc@Zs)oB#nNWefI^kt{&Vzs0qFQ+;Q`Z=Z2pS5fmi1@?;6bjcFqKKZ!KA zu3e6R!dt|hUliConb%EGljNUIxj*~ju0y#_$n!Rutx1d_zb#0Q+DoW~(gz7~hE{d) zdD)T?#F}DbNg(nB6kSBaJ$mvpQfVnMnSyp4ENV}4Jw~cE%CB1#1U8_hIMjaXc&4d> zTb9K7gS|_X-9^L7^a>SfW0n%^#c~tuih2oaA6tW{Oq0v)bMqAeoP{RhDu6bJWkXM) zcwfcmNWnRQ(kv=AlE&++4%>sjK(%5TZVV-aXh)_QrWMUk4X%e})OsfVk2ucd$~Ci$ zcqle)*Ep(jQwo!11TrHQUk-fC$`naQjq zvnfAtWIy5dh^eQxBRL=FK}br{WWdnpj+C7zPZw-*kTnZ34b^W1cqr*N_SquxNc@UJ zg8^=V&UGq`K?I@G$5~Ft7CIp;a}|K1aN=za!>Lq#ojbwEbyBmrilkA|;G#pczd(pS zt7B;!GDEeNJ!+mQ&C+z2^~*Uu;}SC^=oU*}9~I&EnGuY{EMB1`XBhjnjTR*{ zXUYc^h_p$!MK`M?n{wOFT(^%Urd2H3@?wVHR?F*7(C)#$m(E!@fz5e9b=U|3NV3ys zFZPocM6kZRT7lWf!-6hHeL=O+b{3y##;ogeEhYX|S0n27F{VV5&>3`+gGzZ60-x;Q zkWEcwUmG0=NL&e{B#JtkA2UT9Y#-=t0G@{M5;zkTI&DE_r|QyGWm7GN*WSjIsymBo z;x=209hm~KORG9)6WsVnnLkb|nuT@%#y2Ksebjr6uj(a?;qM47A$PciUxmX!Z?tRD zw;cVtX3XaVA?KaGw{uU{kmci?^C;Q4^T)#8eEu2R@ z!+p8)-+?61i#jK9duIEO83DJ>7^>ELlY-NGcOUY5LxYj6p`3%Qogyyl?Wwh5Nrqy(;+=qy8XInkSR%0MvCN!&9l~L+;9rYKB#aoF6zdZWZK6JI=l7dEv z#~XfOGGbFO;Mx%o%q}D+2sWQ31swd%jpktZnPZaTvnk2(50^|C`vI$Q4|_X;2&@R{ z8F1;9KD!4PAI&PA=F;|*!p7xv`RdTTw0&d~2lnS0CI}RPDUij~iJdDc6zX!5>5 zcahY$v-__^z7N?yw~Tmc%auRoc7tD`@;p_>>w|!Uu*NfSLPD4>@pvP`_*EiCLuRBV ztGc?2q)`nVXdda&$*R#N#LnIpT66luxL%)VRhtGU)8#aLse4~GpZYLkkpt|@r{cqEze0)k|B9UoU?Q# zxEUT%M!vbQqQ!3)Zoje61Y+MGY)&@7sFhV&AC-g1H2id(>*decI!1`N!7Cnb&xGeB zNoGuBzcbUx-PPHbq*bhA+ptTInnY(8Bw2_3g`tnNj$lPx!MWyS#@-uoe8${aH<;yT z2cQy$nhMwlXCEvyiqMwAyDOYsmFI>;2t5SI=;q+RH~*fg9O57bbiYgV(mz%@{LRQZJ384~|5vF0uSf#`wFy$+mg&)g@7{$vr>!4I z&1Vz`kIDrGmdO}X`^_eRT3Z(WhY>Z2HTlb#@*^yT({|kMZg}1qK7y&sTfutX=ZMN0 zlc;U3aAYiFXH%X1`<}g6G%OCf$Rtloy(rm@^OvoY^u-Y~C@gO%1PGYzJ-7WAInh`} zu7iRWI7?L4ijSU$J?!nG_10Vvb;@7yBcibi)bkO>m$Tq~cg|(oE)R+%Ey~87PPg}% z!B_f@lkZ{b+Rm==d@E*3D;3jF>QT_c%v*_xkU4T73ao}o#V)EJL#FI}M(G)Wh(&x= z-*xKGjKH3(@u)J*x+F-O2(?TPjK1CPXmG1aL90_Sz54#F2fs5gaR0;0s(|w6vV(Q{eoS?pLTN zu>SQx%U!cCG<&zp88Sl%$~B$cD1Lj=-L09GmFluEmXWk+m}N7@IG;V5TMC6@I_R>z zDeUm!=V$x`MCaRi>@OD?^)keMoki7dR=JHV@b zl$Hd@7fcf;irqff{}Fu@A3;Hgiuz!O8AAO&{^ZefT_ZQPC{QumRnEEng00oe*pI0!TkUL literal 0 HcmV?d00001 diff --git a/tools/matrix/4x4-with-5-levels/risk-matrix-4x4-with-5-levels.xlsx b/tools/matrix/risk-matrix-4x4-with-5-levels.xlsx similarity index 100% rename from tools/matrix/4x4-with-5-levels/risk-matrix-4x4-with-5-levels.xlsx rename to tools/matrix/risk-matrix-4x4-with-5-levels.xlsx diff --git a/tools/matrix/5x5-iso-27005/risk-matrix-5x5-iso-27005.xlsx b/tools/matrix/risk-matrix-5x5-iso-27005.xlsx similarity index 100% rename from tools/matrix/5x5-iso-27005/risk-matrix-5x5-iso-27005.xlsx rename to tools/matrix/risk-matrix-5x5-iso-27005.xlsx diff --git a/tools/matrix/5x5-sensitive/risk-matrix-5x5-sensitive.xlsx b/tools/matrix/risk-matrix-5x5-sensitive.xlsx similarity index 100% rename from tools/matrix/5x5-sensitive/risk-matrix-5x5-sensitive.xlsx rename to tools/matrix/risk-matrix-5x5-sensitive.xlsx