# solenefig-lab/grc-banqueconnect architecture

> Architecture diagram of the GitHub repository solenefig-lab/grc-banqueconnect, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-29). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/solenefig-lab/grc-banqueconnect
- Repository: https://github.com/solenefig-lab/grc-banqueconnect

## Overview

BanqueConnect is a fictional banking cyber-crisis exercise, not an implemented software system. Its principal workflow documents a third-party data-exfiltration crisis, from investigation and coordinated response through executive decisions and regulatory or customer notifications; the exercise also records arbitration and lessons learned. The two deliverables are the timeline and the J+0 COMEX presentation. Relationships below reflect responsibilities and outputs explicitly described in the README; the documents’ detailed contents were not sampled, so finer-grained links are omitted.

Main entry points: [`timeline-crise.md`](https://github.com/solenefig-lab/grc-banqueconnect/blob/main/timeline-crise.md) (Crisis timeline), [`Presentation-COMEX.md`](https://github.com/solenefig-lab/grc-banqueconnect/blob/main/Presentation-COMEX.md) (COMEX presentation)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_scenario["Incident scenario"]
  node_kycpro["KYCPro"]
  node_timeline["Crisis timeline<br/>[timeline-crise.md]"]
end

subgraph group_response["Crisis response"]
  node_soc["SOC"]
  node_rssi["RSSI"]
end

subgraph group_governance["Governance and communications"]
  node_comex["COMEX"]
  node_presentation["COMEX presentation"]
  node_dpo["DPO"]
  node_compliance["Compliance"]
  node_legal["Legal"]
  node_communications["Communications"]
  node_support["Customer support"]
end

node_cnil(("CNIL"))
node_acpr(("ACPR"))
node_customers(("Customers"))

node_kycpro -->|"incident scenario"| node_timeline
node_soc -->|"investigates"| node_timeline
node_rssi -->|"coordinates"| node_timeline
node_comex -->|"decides"| node_timeline
node_timeline -->|"informs J+0"| node_presentation
node_compliance -->|"checks DORA duties"| node_timeline
node_legal -->|"handles contract issues"| node_timeline
node_dpo -->|"notifies"| node_cnil
node_dpo -->|"notifies"| node_customers
node_compliance -->|"notifies"| node_acpr
node_communications -->|"communicates"| node_customers
node_support -->|"handles inquiries"| node_customers

click node_timeline "https://github.com/solenefig-lab/grc-banqueconnect/blob/main/timeline-crise.md"
click node_presentation "https://github.com/solenefig-lab/grc-banqueconnect/blob/main/Presentation-COMEX.md"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_kycpro,node_timeline toneBlue
class node_soc,node_rssi toneAmber
class node_comex,node_presentation,node_dpo,node_compliance,node_legal,node_communications,node_support toneMint
class node_cnil,node_acpr,node_customers toneIndigo
```

## Components

### Incident scenario

- **KYCPro**
- [Crisis timeline](https://github.com/solenefig-lab/grc-banqueconnect/blob/main/timeline-crise.md): `timeline-crise.md`

### Crisis response

- **SOC**
- **RSSI**

### Governance and communications

- **COMEX**
- [COMEX presentation](https://github.com/solenefig-lab/grc-banqueconnect/blob/main/Presentation-COMEX.md): `Presentation-COMEX.md`
- **DPO**
- **Compliance**
- **Legal**
- **Communications**
- **Customer support**

### Other components

- **CNIL**
- **ACPR**
- **Customers**

## Connections

- KYCPro → Crisis timeline: incident scenario
- SOC → Crisis timeline: investigates
- RSSI → Crisis timeline: coordinates
- COMEX → Crisis timeline: decides
- Crisis timeline → COMEX presentation: informs J+0
- Compliance → Crisis timeline: checks DORA duties
- Legal → Crisis timeline: handles contract issues
- DPO → CNIL: notifies
- DPO → Customers: notifies
- Compliance → ACPR: notifies
- Communications → Customers: communicates
- Customer support → Customers: handles inquiries