-- DBAOps Enterprise™ - Seed Data
-- Generated: 2026-02-05 08:20:54
USE [DBAOpsRepository];
GO

-- Seed: config.GovernmentCompliance (8 rows)
DELETE FROM config.GovernmentCompliance;
INSERT INTO config.GovernmentCompliance ([ComplianceID],[ComplianceName],[ComplianceCode],[Description],[AppliesTo],[AuthorizationLevel],[IsActive],[SortOrder]) VALUES (1,'FedRAMP High','FEDRAMP-H','Federal Risk and Authorization Management Program - High Impact Level. Authorizes use of Azure Government cloud services for high-impact federal systems.','Azure Government','High Impact',True,1);
INSERT INTO config.GovernmentCompliance ([ComplianceID],[ComplianceName],[ComplianceCode],[Description],[AppliesTo],[AuthorizationLevel],[IsActive],[SortOrder]) VALUES (2,'CJIS Security Policy','CJIS','Criminal Justice Information Services Security Policy. Required for all systems handling criminal justice information.','Both','Law Enforcement',True,2);
INSERT INTO config.GovernmentCompliance ([ComplianceID],[ComplianceName],[ComplianceCode],[Description],[AppliesTo],[AuthorizationLevel],[IsActive],[SortOrder]) VALUES (3,'DoD Impact Level 4','DOD-IL4','Department of Defense Impact Level 4 - Controlled Unclassified Information (CUI). Authorizes processing of CUI in Azure Government.','Azure Government','CUI',True,3);
INSERT INTO config.GovernmentCompliance ([ComplianceID],[ComplianceName],[ComplianceCode],[Description],[AppliesTo],[AuthorizationLevel],[IsActive],[SortOrder]) VALUES (4,'DoD Impact Level 5','DOD-IL5','Department of Defense Impact Level 5 - National Security Systems. Authorizes processing of unclassified NSS and CUI.','Azure Government','NSS/CUI',True,4);
INSERT INTO config.GovernmentCompliance ([ComplianceID],[ComplianceName],[ComplianceCode],[Description],[AppliesTo],[AuthorizationLevel],[IsActive],[SortOrder]) VALUES (5,'DoD Impact Level 6','DOD-IL6','Department of Defense Impact Level 6 - Classified Information up to SECRET. Available in Azure Government Secret regions (April 2025).','Azure Government Secret','SECRET',True,5);
INSERT INTO config.GovernmentCompliance ([ComplianceID],[ComplianceName],[ComplianceCode],[Description],[AppliesTo],[AuthorizationLevel],[IsActive],[SortOrder]) VALUES (6,'NIST 800-53','NIST-800-53','NIST Special Publication 800-53 Security and Privacy Controls. Foundation for federal information security standards.','Both','Federal Standard',True,6);
INSERT INTO config.GovernmentCompliance ([ComplianceID],[ComplianceName],[ComplianceCode],[Description],[AppliesTo],[AuthorizationLevel],[IsActive],[SortOrder]) VALUES (7,'STIG Compliance','STIG','Security Technical Implementation Guides. DoD configuration standards for hardening systems.','Both','DoD Standard',True,7);
INSERT INTO config.GovernmentCompliance ([ComplianceID],[ComplianceName],[ComplianceCode],[Description],[AppliesTo],[AuthorizationLevel],[IsActive],[SortOrder]) VALUES (8,'StateRAMP','STATERAMP','State Risk and Authorization Management Program. Cloud security for state and local government.','Both','State/Local',True,8);
GO

-- Seed: config.HealthComplianceThresholds (7 rows)
DELETE FROM config.HealthComplianceThresholds;
INSERT INTO config.HealthComplianceThresholds ([ThresholdID],[MetricName],[WarningThreshold],[CriticalThreshold],[ComparisonType],[Standard],[Recommendation],[IsEnabled]) VALUES (1,'CPU_Percent',75.00,90.00,'ABOVE','NIST SP 800-53','Investigate high CPU processes. Consider scaling resources or optimizing queries.',True);
INSERT INTO config.HealthComplianceThresholds ([ThresholdID],[MetricName],[WarningThreshold],[CriticalThreshold],[ComparisonType],[Standard],[Recommendation],[IsEnabled]) VALUES (2,'Memory_Percent',80.00,90.00,'ABOVE','DISA STIG','Review memory-intensive queries. Consider increasing max server memory or adding RAM.',True);
INSERT INTO config.HealthComplianceThresholds ([ThresholdID],[MetricName],[WarningThreshold],[CriticalThreshold],[ComparisonType],[Standard],[Recommendation],[IsEnabled]) VALUES (3,'PageLifeExpectancy',600.00,300.00,'BELOW','Best Practice','Memory pressure detected. Review buffer pool usage and consider adding memory.',True);
INSERT INTO config.HealthComplianceThresholds ([ThresholdID],[MetricName],[WarningThreshold],[CriticalThreshold],[ComparisonType],[Standard],[Recommendation],[IsEnabled]) VALUES (4,'Blocking_Sessions',1.00,5.00,'ABOVE','CJIS Security Policy','Active blocking detected. Identify and resolve blocking chains immediately.',True);
INSERT INTO config.HealthComplianceThresholds ([ThresholdID],[MetricName],[WarningThreshold],[CriticalThreshold],[ComparisonType],[Standard],[Recommendation],[IsEnabled]) VALUES (5,'Disk_UsedPercent',75.00,85.00,'ABOVE','NIST SP 800-53','Disk space running low. Clean up or expand storage.',True);
INSERT INTO config.HealthComplianceThresholds ([ThresholdID],[MetricName],[WarningThreshold],[CriticalThreshold],[ComparisonType],[Standard],[Recommendation],[IsEnabled]) VALUES (6,'Backup_Age_Hours',24.00,48.00,'ABOVE','CJIS 5.4.1.1','Backup SLA violation. Verify backup jobs and storage availability.',True);
INSERT INTO config.HealthComplianceThresholds ([ThresholdID],[MetricName],[WarningThreshold],[CriticalThreshold],[ComparisonType],[Standard],[Recommendation],[IsEnabled]) VALUES (7,'LogBackup_Age_Hours',1.00,4.00,'ABOVE','CJIS 5.4.1.1','Log backup overdue. Check log backup jobs for failures.',True);
GO

-- Seed: config.ParallelismComplianceStandards (4 rows)
DELETE FROM config.ParallelismComplianceStandards;
INSERT INTO config.ParallelismComplianceStandards ([StandardID],[SettingName],[MinValue],[MaxValue],[RecommendedValue],[ComplianceStandard],[Rationale],[Recommendation]) VALUES (1,'MAXDOP',1,8,'NUMA: Cores per NUMA node (max 8); Non-NUMA: 50% of logical CPUs (max 8)','NIST SP 800-53 SC-5 (Denial of Service Protection), DISA STIG','Prevents single queries from consuming all CPU resources, ensuring system availability and preventing denial of service conditions.','Set MAXDOP based on CPU topology: For NUMA systems, use cores per NUMA node (max 8). For non-NUMA, use 50% of logical CPUs (max 8). Never use 0 in production.');
INSERT INTO config.ParallelismComplianceStandards ([StandardID],[SettingName],[MinValue],[MaxValue],[RecommendedValue],[ComplianceStandard],[Rationale],[Recommendation]) VALUES (2,'Cost Threshold for Parallelism',25,50,'25-50 (recommended: 50 for OLTP, 25 for mixed workloads)','NIST SP 800-53 SC-5, CJIS Security Policy 5.10.1.1','Default value of 5 causes excessive parallelism, degrading performance and increasing resource contention. Higher values ensure only expensive queries use parallelism.','Set to 50 for OLTP systems, 25-50 for mixed workloads. Values below 25 may cause excessive parallel plan generation.');
INSERT INTO config.ParallelismComplianceStandards ([StandardID],[SettingName],[MinValue],[MaxValue],[RecommendedValue],[ComplianceStandard],[Rationale],[Recommendation]) VALUES (3,'Max Server Memory',NULL,NULL,'Total RAM - 4GB (or 10% for servers >64GB)','DISA STIG, NIST SP 800-53 SC-6 (Resource Availability)','Leaving memory for OS and other processes prevents memory pressure and system instability.','Set Max Server Memory to: Total RAM - 4GB for servers <=64GB, or 90% of Total RAM for servers >64GB. Never leave at default (2147483647).');
INSERT INTO config.ParallelismComplianceStandards ([StandardID],[SettingName],[MinValue],[MaxValue],[RecommendedValue],[ComplianceStandard],[Rationale],[Recommendation]) VALUES (4,'Optimize for Ad Hoc Workloads',1,1,'1 (Enabled)','NIST SP 800-53 SC-5, Best Practice','Prevents plan cache bloat from single-use ad hoc queries, improving memory utilization.','Enable this setting (set to 1) to reduce plan cache memory usage from ad hoc queries.');
GO

-- Seed: config.BackupComplianceThresholds (4 rows)
DELETE FROM config.BackupComplianceThresholds;
INSERT INTO config.BackupComplianceThresholds ([ThresholdID],[Environment],[BackupType],[WarningHours],[CriticalHours],[ComplianceStandard],[Description]) VALUES (1,'PROD','Full',96,120,'CJIS 5.4.1.1','PROD: Full backup warning at 4 days, critical at 5 days');
INSERT INTO config.BackupComplianceThresholds ([ThresholdID],[Environment],[BackupType],[WarningHours],[CriticalHours],[ComplianceStandard],[Description]) VALUES (2,'PROD','TLog',1,2,'CJIS 5.4.1.1','PROD: TLog backup warning at 1 hour, critical at 2 hours');
INSERT INTO config.BackupComplianceThresholds ([ThresholdID],[Environment],[BackupType],[WarningHours],[CriticalHours],[ComplianceStandard],[Description]) VALUES (3,'NON-PROD','Full',144,168,'Best Practice','NON-PROD: Full backup warning at 6 days, critical at 7 days');
INSERT INTO config.BackupComplianceThresholds ([ThresholdID],[Environment],[BackupType],[WarningHours],[CriticalHours],[ComplianceStandard],[Description]) VALUES (4,'NON-PROD','TLog',NULL,NULL,'N/A','NON-PROD: TLog backups not required');
GO

-- Seed: Assessment.ComplianceFrameworks (4 rows)
DELETE FROM Assessment.ComplianceFrameworks;
INSERT INTO Assessment.ComplianceFrameworks ([FrameworkID],[FrameworkCode],[FrameworkName],[FrameworkDescription],[FrameworkVersion],[IsActive],[CreatedDate]) VALUES (1,'CJIS','Criminal Justice Information Services','FBI CJIS Security Policy for law enforcement data protection','5.9.3',True,'2025-12-23 09:23:51');
INSERT INTO Assessment.ComplianceFrameworks ([FrameworkID],[FrameworkCode],[FrameworkName],[FrameworkDescription],[FrameworkVersion],[IsActive],[CreatedDate]) VALUES (2,'NIST','NIST Cybersecurity Framework','National Institute of Standards and Technology security controls','2.0',True,'2025-12-23 09:23:51');
INSERT INTO Assessment.ComplianceFrameworks ([FrameworkID],[FrameworkCode],[FrameworkName],[FrameworkDescription],[FrameworkVersion],[IsActive],[CreatedDate]) VALUES (3,'STIG','Security Technical Implementation Guides','DoD security configuration standards for SQL Server','2.6',True,'2025-12-23 09:23:51');
INSERT INTO Assessment.ComplianceFrameworks ([FrameworkID],[FrameworkCode],[FrameworkName],[FrameworkDescription],[FrameworkVersion],[IsActive],[CreatedDate]) VALUES (4,'DISA','Defense Information Systems Agency','DISA security requirements for database systems','2024',True,'2025-12-23 09:23:51');
GO

-- Seed: Assessment.ComplianceControls (40 rows)
DELETE FROM Assessment.ComplianceControls;
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (1,1,'CJIS-5.4','Auditing and Accountability','Agencies shall implement audit and accountability controls','Access Control','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (2,1,'CJIS-5.5','Access Control','Role-based access control implementation','Access Control','CRITICAL',5,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (3,1,'CJIS-5.6','Identification and Authentication','Advanced authentication for CJI access','Authentication','CRITICAL',5,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (4,1,'CJIS-5.7','Configuration Management','Baseline configurations for information systems','Configuration','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (5,1,'CJIS-5.8','Media Protection','Protection of digital and physical media','Data Protection','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (6,1,'CJIS-5.9','Physical Protection','Physical access controls to facilities','Physical Security','MEDIUM',2,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (7,1,'CJIS-5.10','Systems and Communications Protection','Encryption of CJI in transit and at rest','Encryption','CRITICAL',5,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (8,1,'CJIS-5.11','Formal Audits','Triennial security compliance audits','Audit','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (9,1,'CJIS-5.12','Personnel Security','Background screening requirements','Personnel','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (10,1,'CJIS-5.13','Mobile Devices','Mobile device security controls','Mobile','MEDIUM',2,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (11,2,'NIST-ID.AM','Asset Management','Identify and manage data, personnel, devices, systems','Identify','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (12,2,'NIST-ID.RA','Risk Assessment','Understand cybersecurity risk to operations','Identify','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (13,2,'NIST-PR.AC','Access Control','Limit access to authorized users and processes','Protect','CRITICAL',5,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (14,2,'NIST-PR.DS','Data Security','Protect data confidentiality, integrity, availability','Protect','CRITICAL',5,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (15,2,'NIST-PR.IP','Information Protection','Security policies and procedures maintained','Protect','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (16,2,'NIST-PR.MA','Maintenance','System maintenance and repairs performed','Protect','MEDIUM',2,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (17,2,'NIST-DE.CM','Security Monitoring','Continuous security monitoring','Detect','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (18,2,'NIST-DE.AE','Anomaly Detection','Anomalous activity detection','Detect','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (19,2,'NIST-RS.RP','Response Planning','Response processes and procedures','Respond','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (20,2,'NIST-RC.RP','Recovery Planning','Recovery processes and procedures','Recover','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (21,3,'STIG-V1','SQL Server Authentication Mode','Windows Authentication mode required','Authentication','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (22,3,'STIG-V2','SA Account Disabled','SA account must be disabled','Access Control','CRITICAL',5,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (23,3,'STIG-V3','Audit Login Failures','Failed login attempts must be audited','Auditing','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (24,3,'STIG-V4','Database Encryption','TDE enabled for sensitive databases','Encryption','CRITICAL',5,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (25,3,'STIG-V5','Backup Encryption','Database backups must be encrypted','Encryption','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (26,3,'STIG-V6','CLR Disabled','CLR should be disabled if not required','Configuration','MEDIUM',2,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (27,3,'STIG-V7','xp_cmdshell Disabled','xp_cmdshell must be disabled','Configuration','CRITICAL',5,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (28,3,'STIG-V8','Remote Access Disabled','Remote access option should be disabled','Configuration','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (29,3,'STIG-V9','Cross DB Ownership Chaining','Cross database ownership chaining disabled','Configuration','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (30,3,'STIG-V10','Guest Account Permissions','Guest account must have no permissions','Access Control','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (31,4,'DISA-AC1','Account Management','Manage system accounts and access','Access Control','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (32,4,'DISA-AC2','Separation of Duties','Enforce separation of duties','Access Control','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (33,4,'DISA-AU1','Audit Events','Audit specified events','Auditing','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (34,4,'DISA-AU2','Audit Storage','Protect audit information and storage','Auditing','MEDIUM',2,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (35,4,'DISA-CM1','Configuration Settings','Establish and document configuration settings','Configuration','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (36,4,'DISA-CM2','Change Control','Track and control system changes','Configuration','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (37,4,'DISA-IA1','User Identification','Uniquely identify and authenticate users','Authentication','CRITICAL',5,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (38,4,'DISA-SC1','Communications Protection','Protect communications confidentiality','Encryption','CRITICAL',5,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (39,4,'DISA-SC2','Data at Rest','Protect data at rest','Encryption','HIGH',3,NULL,NULL,True,True);
INSERT INTO Assessment.ComplianceControls ([ControlID],[FrameworkID],[ControlCode],[ControlName],[ControlDescription],[Category],[Severity],[ControlWeight],[CheckQuery],[RemediationSteps],[IsAutomated],[IsActive]) VALUES (40,4,'DISA-SI1','System Integrity','Monitor and protect system integrity','Integrity','HIGH',3,NULL,NULL,True,True);
GO

-- Seed: compliance.ComplianceFrameworks (4 rows)
DELETE FROM compliance.ComplianceFrameworks;
INSERT INTO compliance.ComplianceFrameworks ([FrameworkID],[FrameworkName],[FrameworkVersion],[Description],[IsActive],[CreatedDate]) VALUES (1,'CJIS','5.9','Criminal Justice Information Services Security Policy',True,'2026-01-19 13:20:45');
INSERT INTO compliance.ComplianceFrameworks ([FrameworkID],[FrameworkName],[FrameworkVersion],[Description],[IsActive],[CreatedDate]) VALUES (2,'NIST','800-53 Rev 5','NIST Security and Privacy Controls',True,'2026-01-19 13:20:45');
INSERT INTO compliance.ComplianceFrameworks ([FrameworkID],[FrameworkName],[FrameworkVersion],[Description],[IsActive],[CreatedDate]) VALUES (3,'STIG','SQL Server 2019','DISA STIG for SQL Server',True,'2026-01-19 13:20:45');
INSERT INTO compliance.ComplianceFrameworks ([FrameworkID],[FrameworkName],[FrameworkVersion],[Description],[IsActive],[CreatedDate]) VALUES (4,'DISA','v2r3','DISA Security Requirements',True,'2026-01-19 13:20:45');
GO

