diff --git a/backend/core/views.py b/backend/core/views.py
index dce1894ec..2706cd9c4 100644
--- a/backend/core/views.py
+++ b/backend/core/views.py
@@ -348,7 +348,6 @@ def quality_check_detail(self, request, pk):
 
     @action(detail=True, name="Get treatment plan CSV")
     def treatment_plan_csv(self, request, pk):
-        print("coucou")
         (object_ids_view, _, _) = RoleAssignment.get_accessible_object_ids(
             Folder.get_root_folder(), request.user, RiskAssessment
         )
diff --git a/tools/README.md b/tools/README.md
new file mode 100644
index 000000000..cb1dad486
--- /dev/null
+++ b/tools/README.md
@@ -0,0 +1,82 @@
+# Library workbench
+
+The convert-framework.py script can be used to transform an Excel file to a CISO Assitant library.
+
+Have a look to the given examples.
+
+## Usage
+
+To launch it, open a shell in a command line, and type:
+
+```bash
+python convert-framework.py your_library_file.xlsx
+```
+
+This will produce a file name your_library_file.yaml
+
+## Format of Excel files
+
+This is documented in the header of the python file. Please note the notion of level is not yet implemented in CISO Assistant.
+
+```
+Conventions:
+    | means a cell separation, <> means empty cell
+    The first tab shall be named "library_content" and contain the description of the library in the other tabs
+        library_urn                 | <urn>
+        library_version             | <version>
+        library_locale              | <en/fr/...>
+        library_ref_id              | <ref_id>
+        library_name                | <name>
+        library_description         | <description>
+        library_copyright           | <copyright>
+        library_provider            | <provider>
+        library_packager            | <packager>
+        library_dependencies        | <urn1, urn2...
+        framework_urn               | <urn>
+        framework_ref_id            | <ref_id>
+        framework_name              | <name>
+        framework_description       | <description>
+        security_function_base_urn  | <base_urn>            | id
+        threat_base_urn             | <base_urn>            | id
+        tab                         | <tab_name>            | levels
+        tab                         | <tab_name>            | requirements       | <section_name>
+        tab                         | <tab_name>            | threats            | <base_urn>
+        tab                         | <tab_name>            | security_functions | <base_urn>
+
+
+    For levels:
+        A "levels" tab enumerates levels. If it exists, it shall be placed before the correponding framework.
+        The first line is a header, with the following possible fields (* for required):
+            - level(*)
+            - ref_id(*)
+            - name
+            - description
+            - annotation
+    For requirements:
+        If no section_name is given, no upper group is defined, else an upper group (depth 0) with the section name is used.
+        The first line is a header, with the following possible fields (* for required):
+            - assessable(*): non-empty (e.g x) if this is a requirement 
+            - depth(*): 1/2/3/... to describe the tree
+            - ref_id
+            - name
+            - description
+            - level
+            - maturity
+            - threats
+            - security_functions
+            - annotation
+        The normal tree order shall be respected
+        If multiple threats or security_function are given for a requirements, they shall be separated by blank or comma.
+        They shall be prefixed by the id of the corresponding base_urn and a semicolumn.
+    For security functions:
+        The first line is a header, with the following possible fields (* for required):
+            - depth(*): 1/2/3/.. for requirement groups, empty for a requirement.
+            - ref_id(*)
+            - name
+            - description
+            - category (policy/process/techncial/physical).
+            - annotation
+    A library has a single locale. Translated libraries have the same urns, they are merged during import.
+    Dependencies are given as a comma or blank separated list of urns.
+''' 
+```
\ No newline at end of file
diff --git a/tools/cmmc-v2.xlsx b/tools/cmmc-v2.xlsx
new file mode 100644
index 000000000..17462d594
Binary files /dev/null and b/tools/cmmc-v2.xlsx differ
diff --git a/tools/convert_framework.py b/tools/convert_framework.py
new file mode 100644
index 000000000..027d4ad17
--- /dev/null
+++ b/tools/convert_framework.py
@@ -0,0 +1,312 @@
+''' 
+simple script to transform an Excel file to a yaml library for a CISO assistant framework
+Conventions:
+    | means a cell separation, <> means empty cell
+    The first tab shall be named "library_content" and contain the description of the library in the other tabs
+        library_urn                 | <urn>
+        library_version             | <version>
+        library_locale              | <en/fr/...>
+        library_ref_id              | <ref_id>
+        library_name                | <name>
+        library_description         | <description>
+        library_copyright           | <copyright>
+        library_provider            | <provider>
+        library_packager            | <packager>
+        library_dependencies        | <urn1, urn2...
+        framework_urn               | <urn>
+        framework_ref_id            | <ref_id>
+        framework_name              | <name>
+        framework_description       | <description>
+        security_function_base_urn  | <base_urn>            | id
+        threat_base_urn             | <base_urn>            | id
+        tab                         | <tab_name>            | levels
+        tab                         | <tab_name>            | requirements       | <section_name>
+        tab                         | <tab_name>            | threats            | <base_urn>
+        tab                         | <tab_name>            | security_functions | <base_urn>
+
+
+    For levels:
+        A "levels" tab enumerates levels. If it exists, it shall be placed before the correponding framework.
+        The first line is a header, with the following possible fields (* for required):
+            - level(*)
+            - ref_id(*)
+            - name
+            - description
+            - annotation
+    For requirements:
+        If no section_name is given, no upper group is defined, else an upper group (depth 0) with the section name is used.
+        The first line is a header, with the following possible fields (* for required):
+            - assessable(*): non-empty (e.g x) if this is a requirement 
+            - depth(*): 1/2/3/... to describe the tree
+            - ref_id
+            - name
+            - description
+            - level
+            - maturity
+            - threats
+            - security_functions
+            - annotation
+        The normal tree order shall be respected
+        If multiple threats or security_function are given for a requirements, they shall be separated by blank or comma.
+        They shall be prefixed by the id of the corresponding base_urn and a semicolumn.
+    For security functions:
+        The first line is a header, with the following possible fields (* for required):
+            - depth(*): 1/2/3/.. for requirement groups, empty for a requirement.
+            - ref_id(*)
+            - name
+            - description
+            - category (policy/process/techncial/physical).
+            - annotation
+    A library has a single locale. Translated libraries have the same urns, they are merged during import.
+    Dependencies are given as a comma or blank separated list of urns.
+''' 
+
+import openpyxl
+import sys
+import re
+import yaml
+from pprint import pprint
+from collections import defaultdict
+
+LIBRARY_VARS = ('library_urn', 'library_version', 'library_locale', 'library_ref_id', 'library_name', 'library_description', 
+                    'framework_urn', 'framework_ref_id', 'framework_name', 'framework_description', 'library_copyright',
+                    'library_provider', 'library_packager', 'security_function_base_urn', 'threat_base_urn', 'library_dependencies', 'tab')
+library_vars = {}
+library_vars_dict = defaultdict(dict)
+library_vars_dict_reverse = defaultdict(dict)
+library_vars_dict_arg = defaultdict(dict)
+
+if len(sys.argv) <= 1:
+    print("missing input file parameter")
+    exit()
+input_file_name = sys.argv[1]
+ref_name = re.sub(r"\.\w+$", "", input_file_name).lower()
+output_file_name = ref_name + ".yaml"
+
+print("parsing", input_file_name)
+
+# Define variable to load the dataframe
+dataframe = openpyxl.load_workbook(input_file_name)
+
+requirement_nodes = []
+security_functions = []
+threats = []
+
+def error(message):
+    print("Error:", message)
+    exit(1)
+
+
+def read_header(row):
+    i = 0
+    header = {}
+    for v in row:
+        v = str(v.value).lower()
+        header[v] = i
+        i += 1
+    return header
+
+
+for tab in dataframe:
+    print("parsing tab", tab.title)
+    title = tab.title
+    if title.lower() == "library_content":
+        print("...processing content")
+        for row in tab:
+            if any([r.value for r in row]):
+                (v1, v2, v3) = (r.value for r in row[0:3])
+                v4 = row[3].value if len(row) > 3 else None
+                if v1 in LIBRARY_VARS:
+                    library_vars[v1] = v2
+                    library_vars_dict[v1][str(v2)] = v3
+                    library_vars_dict_reverse[v1][str(v3)] = v2
+                    library_vars_dict_arg[v1][v2] = v4
+    elif title not in library_vars_dict['tab']:
+        print(f"Ignored tab: {title}")
+    elif library_vars_dict['tab'][title] == 'requirements':
+        print("...processing requirements")
+        root_nodes_urn = re.sub('framework', 'req_node', library_vars['framework_urn'])
+        current_node_urn = None
+        current_depth = 0
+        parent_urn = None
+        parent_for_depth = {}
+        section = library_vars_dict_arg['tab'][title]
+        if section:
+            section_id = section.lower().replace(' ', '-')
+            current_node_urn = f"{root_nodes_urn}:{section_id}"
+            parent_for_depth[1]=current_node_urn
+            requirement_nodes.append({"urn": current_node_urn, "name": section, "assessable": False})
+        is_header = True
+        counter = 0
+        for row in tab:
+            counter += 1
+            if is_header:
+                header = read_header(row)
+                is_header=False
+                assert("assessable" in header)
+                assert("depth" in header)
+                assert("ref_id" in header)
+            elif any([c.value for c in row]):
+                assessable = bool(row[header['assessable']].value)
+                depth = row[header['depth']].value
+                ref_id = str(row[header['ref_id']].value).strip() if row[header['ref_id']].value else None
+                name = row[header['name']].value if 'name' in header else None
+                description = row[header['description']].value if 'description' in header else None
+                annotation = row[header['annotation']].value if 'annotation' in header else None
+                level = row[header['level']].value if 'level' in header else None
+                maturity = row[header['maturity']].value if 'maturity' in header else None
+                ref_id_urn = ref_id.lower().replace(' ', '-') if ref_id else \
+                    name.lower().replace(' ', '-') if name else f"node{counter}"
+                urn = f"{root_nodes_urn}:{ref_id_urn}"
+                if depth == current_depth + 1:
+                    parent_for_depth[depth]=current_node_urn
+                    parent_urn = parent_for_depth[depth]
+                elif depth <= current_depth:
+                    pass
+                else:
+                    error(f"wrong level in requirement (tab {title})")
+                current_node_urn = urn
+                parent_urn = parent_for_depth[depth]
+                current_depth = depth
+                req_node = {"urn": urn, "assessable": assessable, "depth": depth}
+                if parent_urn:
+                    req_node['parent_urn'] = parent_urn
+                if ref_id:
+                    req_node["ref_id"] = ref_id
+                if name:
+                    req_node["name"] = name
+                if description:
+                    req_node["description"] = description
+                if annotation:
+                    req_node["annotation"] = annotation
+                if maturity:
+                    req_node["maturity"] = maturity
+                threats = row[header['threats']].value if 'threats' in header else None
+                security_functions = row[header['security_functions']].value if 'security_functions' in header else None
+                threat_urns = []
+                function_urns = []
+                if threats:
+                    for element in re.split(r'[\s,]+', threats):
+                        parts = re.split(r':', element)
+                        prefix = parts.pop(0)
+                        part_name = ':'.join(parts)
+                        urn_prefix = library_vars_dict_reverse['security_function_base_urn'][prefix]
+                        threat_urns.append(f"{urn_prefix}{part_name}")
+                if security_functions:
+                    for element in re.split(r'[\s,]+', security_functions):
+                        parts = re.split(r':', element)
+                        prefix = parts.pop(0)
+                        part_name = ':'.join(parts)
+                        urn_prefix = library_vars_dict_reverse['security_function_base_urn'][prefix]
+                        function_urns.append(f"{urn_prefix}{part_name}")
+                if threat_urns:
+                    req_node["threats"] = threat_urns
+                if function_urns:
+                    req_node["security_functions"] = function_urns
+                requirement_nodes.append(req_node)
+            else:
+                pass
+                #print("empty row")
+    elif library_vars_dict['tab'][title] == 'security_functions':
+        print("...processing security functions")
+        current_function = {}
+        is_header = True
+        security_functions_base_urn = library_vars['security_function_base_urn']
+        for row in tab:
+            if is_header:
+                header = read_header(row)
+                is_header=False
+                assert("ref_id" in header)
+            elif any([c.value for c in row]):
+                ref_id = str(row[header['ref_id']].value).strip() if row[header['ref_id']].value else None
+                name = row[header['name']].value if 'name' in header else None
+                description = row[header['description']].value if 'description' in header else None
+                category = row[header['category']].value if 'category' in header else None
+                annotation = row[header['annotation']].value if 'annotation' in header else None
+                ref_id_urn = ref_id.lower().replace(' ', '-')
+                current_function = {}
+                current_function['urn'] = f"{security_functions_base_urn}:{ref_id_urn}"
+                current_function['ref_id'] = ref_id
+                if name: 
+                    current_function['name'] = name
+                if category: 
+                    current_function['category'] = category
+                if description:
+                    current_function['description'] = description
+                if annotation:
+                    current_function['annotation'] = annotation
+                security_functions.append(current_function)
+    elif library_vars_dict['tab'][title] == 'threats':
+        print("...processing threats")
+        current_threat = {}
+        is_header = True
+        threat_base_urn = library_vars['threat_base_urn']
+        for row in tab:
+            if is_header:
+                header = read_header(row)
+                print(header)
+                is_header=False
+                assert("ref_id" in header)
+            elif any([c.value for c in row]):
+                ref_id = str(row[header['ref_id']].value).strip() if row[header['ref_id']].value else None
+                name = row[header['name']].value if 'name' in header else None
+                description = row[header['description']].value if 'description' in header else None
+                annotation = row[header['annotation']].value if 'annotation' in header else None
+                ref_id_urn = ref_id.lower().replace(' ', '-')
+                current_threat = {}
+                current_threat['urn'] = f"{threat_base_urn}:{ref_id_urn}"
+                current_threat['ref_id'] = ref_id
+                if name:
+                    current_threat['name'] = name
+                if description:
+                    current_threat['description'] = description
+                if annotation:
+                    current_threat['annotation'] = annotation
+                threats.append(current_threat)
+
+
+#pprint(requirement_groups)
+#pprint(requirements)
+##pprint(security_functions)
+##pprint(threats)
+
+has_framework = 'requirements' in [library_vars_dict['tab'][x] for x in library_vars_dict['tab']]
+has_security_functions = 'security_functions' in [library_vars_dict['tab'][x] for x in library_vars_dict['tab']]
+has_threats = 'threats' in [library_vars_dict['tab'][x] for x in library_vars_dict['tab']]
+
+library = {
+    'urn': library_vars['library_urn'],
+    'locale': library_vars['library_locale'],
+    'ref_id': library_vars['library_ref_id'],
+    'name': library_vars['library_name'],
+    'description': library_vars['library_description'],
+    'copyright': library_vars['library_copyright'],
+    'version': library_vars['library_version'],
+    'provider': library_vars['library_provider'],
+    'packager': library_vars['library_packager'],
+}
+
+if 'library_dependencies' in library_vars:
+    dependencies = [x for x in re.split(r'[\s,]+', library_vars['library_dependencies'])]
+    library['dependencies'] = dependencies
+
+library['objects'] = {}
+
+if has_framework:
+    library['objects']['framework'] = {
+                    'urn': library_vars['framework_urn'],
+                    'ref_id': library_vars['framework_ref_id'],
+                    'name': library_vars['framework_name'],
+                    'description': library_vars['framework_description'],
+                    'requirement_nodes': requirement_nodes
+                }
+
+if has_security_functions:
+    library['objects']['security_functions'] = security_functions
+
+if has_threats:
+    library['objects']['threats'] = threats
+
+print("generating", output_file_name)
+with open(output_file_name, 'w', encoding='utf8') as file:
+    yaml.dump(library, file, sort_keys=False)
diff --git a/tools/nist-csf-1.1-en.xlsx b/tools/nist-csf-1.1-en.xlsx
new file mode 100644
index 000000000..4b88d346b
Binary files /dev/null and b/tools/nist-csf-1.1-en.xlsx differ