// evaluation-engine.jsx — Verigo Global: ISO 27001 readiness evaluation engine
// Questions, scoring, quiz + results components, and a results-PDF generator.
// Exposes window.EVAL
const { V: GV, MAXW: GMW, FONT: GFT } = window;
/* ── QUESTION BANK — 4 themes × 4 statements ─────────────── */
const QUESTIONS = [
{ theme: 'A.5 Organizational', icon: 'briefcase', controls: 37,
docs: ['Information Security Policy', 'Risk Management Policy', 'Supplier & Third-Party Security Policy'],
q: [
'An approved, top-level Information Security Policy is in place and reviewed at least annually.',
'Information security roles and responsibilities are formally defined and assigned.',
'A documented risk assessment and treatment process is operated and kept current.',
'Security requirements for suppliers and cloud services are defined and monitored.',
] },
{ theme: 'A.6 People', icon: 'users', controls: 8,
docs: ['Human Resources Security Policy', 'Security Awareness & Training Procedure'],
q: [
'Personnel are screened before employment and bound by confidentiality terms.',
'All staff complete security awareness training that is tracked and refreshed.',
'A disciplinary process and post-employment responsibilities are defined.',
'Staff know how and where to report information security events.',
] },
{ theme: 'A.7 Physical', icon: 'building', controls: 14,
docs: ['Physical & Environmental Security Policy', 'Clear Desk & Clear Screen Policy'],
q: [
'Secure areas and physical entry controls protect facilities and equipment.',
'Clear desk and clear screen practices are enforced.',
'Storage media and equipment are securely handled, maintained, and disposed of.',
'Physical and environmental threats are monitored and mitigated.',
] },
{ theme: 'A.8 Technological', icon: 'cpu', controls: 34,
docs: ['Access Control Policy', 'Vulnerability & Patch Management Policy', 'Backup Policy', 'Logging & Monitoring Policy'],
q: [
'Multi-factor authentication and least-privilege access are enforced.',
'Technical vulnerabilities are identified and remediated on a defined cadence.',
'Logging and monitoring capture and review security-relevant events.',
'Backups are performed and restoration is regularly tested.',
] },
];
const OPTIONS = [
['Not started', 0],
['Partial', 1],
['Largely', 2],
['Fully', 3],
];
const BANDS = [
[0, 'Initial', GV.orange, 'Foundations are largely missing — start with the core policy and risk set.'],
[40, 'Developing', GV.orange, 'Key pieces exist, but real gaps remain before certification is viable.'],
[60, 'Established', GV.purple, 'A working ISMS is in place — focus on closing the weaker themes.'],
[80, 'Optimized', GV.purple, 'Strong posture — fine-tune evidence and keep it continuous.'],
];
const bandFor = (pct) => { let b = BANDS[0]; BANDS.forEach((x) => { if (pct >= x[0]) b = x; }); return b; };
function computeResults(answers) {
const themes = QUESTIONS.map((t, ti) => {
const max = t.q.length * 3;
let sum = 0;
t.q.forEach((_, qi) => { sum += (answers[ti + '-' + qi] || 0); });
const pct = Math.round((sum / max) * 100);
return { theme: t.theme, icon: t.icon, docs: t.docs, controls: t.controls, pct, gaps: Math.round((1 - pct / 100) * t.controls) };
});
const totSum = themes.reduce((a, t) => a + (t.pct), 0);
const overall = Math.round(totSum / themes.length);
const gaps = themes.reduce((a, t) => a + t.gaps, 0);
return { themes, overall, gaps, band: bandFor(overall) };
}
/* ── SEGMENTED MATURITY CONTROL ──────────────────────────── */
const Segmented = ({ value, onChange }) => (
{OPTIONS.map(([label, val]) => {
const on = value === val;
return (
onChange(val)}
style={{ fontFamily: GFT, fontSize: 13, fontWeight: 700, padding: '10px 6px', cursor: 'pointer', textAlign: 'center', background: on ? GV.purple : '#fff', color: on ? '#fff' : GV.g600, border: `1.5px solid ${on ? GV.purple : GV.g200}`, transition: 'all 120ms' }}>
{label}
);
})}
);
/* ── QUIZ ────────────────────────────────────────────────── */
const EvalQuiz = ({ onComplete, onExit }) => {
const [step, setStep] = React.useState(0);
const [answers, setAnswers] = React.useState({});
const total = QUESTIONS.length;
const cur = QUESTIONS[step];
const set = (qi, v) => setAnswers((a) => ({ ...a, [step + '-' + qi]: v }));
const stepDone = cur.q.every((_, qi) => answers[step + '-' + qi] !== undefined);
const answeredCount = Object.keys(answers).length;
const totalQ = QUESTIONS.reduce((a, t) => a + t.q.length, 0);
const progress = Math.round((answeredCount / totalQ) * 100);
const next = () => { if (step < total - 1) { setStep(step + 1); window.scrollTo({ top: 0 }); } else { onComplete(computeResults(answers)); } };
const back = () => { if (step > 0) { setStep(step - 1); window.scrollTo({ top: 0 }); } else { onExit(); } };
return (
{/* progress */}
Section {step + 1} of {total}
{progress}% complete
Annex A theme
{cur.theme}
For each statement, choose how completely it reflects your organization today.
{cur.q.map((text, qi) => (
{String(qi + 1).padStart(2, '0')}
{text}
set(qi, v)} />
))}
{step === 0 ? 'Exit' : 'Back'}
{step === total - 1 ? 'See my results' : 'Next section'}
{!stepDone &&
Answer all four statements to continue.
}
);
};
/* ── RESULTS ─────────────────────────────────────────────── */
const Donut = ({ pct, color }) => (
);
const EvalResults = ({ results, user, onNav, onRetake }) => {
const { themes, overall, gaps, band } = results;
const [, label, bandColor, bandDesc] = band;
const sorted = [...themes].sort((a, b) => a.pct - b.pct);
const focus = sorted.filter((t) => t.pct < 80);
const MODULES = window.TK_ISO.QUOTE_MODULES;
// Recommend option modules from the weak themes + overall score.
const reco = new Set(['tailor']);
if (overall < 80) reco.add('guidance');
if (overall < 60) { reco.add('impl'); reco.add('preaudit'); }
themes.forEach((t) => {
if (t.pct < 60) {
if (t.theme.startsWith('A.5')) reco.add('risk');
if (t.theme.startsWith('A.8')) reco.add('preaudit');
}
});
const recoIds = [...reco];
const recoModules = MODULES.filter((m) => reco.has(m.id));
const goBuild = () => { try { localStorage.setItem('verigo_reco', JSON.stringify(recoIds)); } catch (e) {} onNav('checkout'); };
return (
{/* SCORE HEADER */}
Overall maturity · {label}
{overall >= 80 ? 'You\u2019re close to audit-ready.' : overall >= 60 ? 'A solid base, with clear gaps to close.' : 'There\u2019s real groundwork to do first.'}
{bandDesc} We estimate ~{gaps} of 93 controls need attention before a Stage 2 audit.
{user && user.company ? ` Prepared for ${user.company}.` : ''}
{/* THEME BREAKDOWN */}
{themes.map((t, i) => {
const c = t.pct < 60 ? GV.orange : GV.purple;
return (
{t.pct}%
~{t.gaps} of {t.controls} controls need attention
);
})}
{/* ACTION PLAN */}
{focus.length === 0 && (
Every theme scored 80%+ — you\u2019re in strong shape. A practitioner can help validate evidence and close the final details.
)}
{focus.map((t, i) => (
{i + 1}
{t.theme}
{t.pct}%
{t.docs.map((d, di) => (
))}
onNav('toolkit:iso27001')} style={{ whiteSpace: 'nowrap' }}>Open toolkit
))}
window.EVAL.generateEvalPDF(results, user)}>
Retake the evaluation
{/* CUSTOM PACKAGE CTA — recommended OPTIONS, not basic bundles */}
{recoModules.map((m, i) => (
))}
Build my custom package
Pick your options, see the price, then download a custom quote.