Add control index links

Signed-off-by: gearnode <bryan@frimin.fr>

controls/core/data/README.md

@@ -12,3 +12,10 @@ client information.
 
 Implement measures to protect data from unauthorized access and set up processes
 to regularly secure and monitor its location.
+
+## Mitigations
+
+- [Automated backup](COR.DAT.001_automated_backup.md)
+- [Help the auditor with a data-flow diagram](COR.DAT.002_data_flow_diagram.md)
+- [Encrypt your data storage](COR.DAT.003_data_at_rest.md)
+- [Encrypt your data in transit](COR.DAT.004_tls.md)

controls/core/infra/README.md

@@ -14,3 +14,12 @@ To secure your infrastructure, you will need to:
 2. Regulate access
 3. Log changes
 4. Fix known vulnerabilities
+
+## Mitigations
+
+- [List of your assets](COR.INF.001_list_your_assets.md)
+- [Scan for security updates](COR.INF.002_scan_security_updates.md)
+- [IAM for database authentication](COR.INF.003_iam_authentication_for_database.md)
+- [Plug GCP & Github](COR.INF.004_short_live_auth_ci.md)
+- [Manage your service accounts](COR.INF.005_manage_service_account.md)
+- [Keep an history of all your changes](COR.INF.006_keep_an_history_of_all_your_changes.md)

controls/core/network/README.md

@@ -15,3 +15,9 @@ Strengthening network security in a targeted, efficient way is essential. By
 restricting access to infrastructure, implementing protective layers like
 Cloudflare, and conducting regular security assessments, you can effectively
 safeguard your systems against unauthorized access and potential attacks.
+
+## Mitigations
+
+- [Restrict public access on your infrastructure](COR.NET.001_restrict_public_access_on_your_infrastructure.md)
+- [Set-up a WAF](COR.NET.002_web_application_firewall.md)
+- [Run a penetration test](COR.NET.003_penetration_test.md)

controls/core/src/README.md

@@ -16,3 +16,10 @@ helps you scale your engineering team.
 - **Implement structured processes:** Define a development lifecycle for
   software, adopt Infrastructure-as-Code (IaC), and deploy configuration
   management systems to maintain consistency and security.
+
+## Mitigations
+
+- [Code Review](COR.SRC.001.patch_review.md)
+- [Configure Code Scanning](COR.SRC.002.enable_code_scanning.md)
+- [Configure Dependancy Vulnerability Alerts](COR.SRC.003.dependancy_vulnerability_alerts.md)
+- [Document your Development Lifecycle](COR.SRC.004.systems_development_life_cycle.md)