Add control index links

Signed-off-by: gearnode <bryan@frimin.fr>

controls/personnel/access/README.md

@@ -19,3 +19,11 @@ The main idea is to follow those principles:
    passwords/access
 3. **Continuous update:** making sure the privileges are up to date and you use
    the latest best practices
+
+## Mitigations
+
+- [Enable MFA on critical services](PER.ACC.001_mfa_on_critical_services.md)
+- [Access Request Process](PER.ACC.002_access_request_process.md)
+- [Setup a password manager](PER.ACC.003_password_manager.md)
+- [Setup Role Based Access Control](PER.ACC.004_role_based_access_control.md)
+- [Enforce SSO when possible](PER.ACC.005_enforce_single_sign_on.md)

controls/personnel/comms/README.md

@@ -15,3 +15,10 @@ To do so, we divided the work in two steps:
 
 - You secure the access to your offices.
 - You secure the internet connexion of remote employees
+
+## Mitigations
+
+- [Configure SPF for Email Authentication](PER.COM.001.sender_policy_framework.md)
+- [Configure DKIM for Email Authentication](PER.COM.002.dkim_implementation.md)
+- [Configure DMARC for Email Authentication](PER.COM.003.domain_based_message_authentication.md)
+- [Configure Email Security Filters](PER.COM.004.email_filtering_and_warning_system.md)

controls/personnel/lifecycle/README.md

@@ -15,3 +15,13 @@ You will focus on two things:
   prepared and you are sure not to forgot anything.
 - **Enabling**: empower your employees to take the best decision possible to
   maintain your security posture
+
+## Mitigations
+
+- [Integrate security checklist in your onboarding process](PER.LIF.001_onboarding.md)
+- [Properly off-board your employees](PER.LIF.002_offboarding.md)
+- [Know your recruits](PER.LIF.003_pre-employment-screening-process.md)
+- [Implement confidential whistleblower process](PER.LIF.004_confidential_whistleblower_process.md)
+- [Run performance reviews](PER.LIF.005_performance_reviews.md)
+- [Specify security responsabilities](PER.LIF.006_security_roles_and_responsibilities.md)
+- [Train your employees on security](PER.LIF.007_security_awareness_training.md)