- When enabled, users cannot log in without 2FA configured.
- Login will be rejected with an explanatory message.
+ ${t('org_2faDesc')}
- Warning: Only enable if all user accounts already have 2FA set up.
- Otherwise affected accounts will be locked out immediately.
+ ${t('warning')}: ${t('org_2faWarning')}
-
Language Configuration
+
${t('admin_langConfig')}
- Enable or disable languages system-wide. The default language is shown on the login page
- for users without a stored preference.
+ ${t('admin_langConfigDesc')}
- SMTP credentials are configured in the .env file (SMTP_HOST, SMTP_USER etc.).
- Only notification types are controlled here.
+ ${t('org_smtpEnvNotice')}
-
Enable daily digest e-mails
-
Sends a daily summary to CISO, GDPO and admin e-mail once per day.
- Security notice: The SMTP password is stored in org-settings.json (plaintext).
- For higher security, use environment variables (SMTP_HOST etc.) in .env — these always take precedence.
+ ${t('org_securityNotice')}: ${t('org_smtpSecurityNotice')}
- SMTP is configured via .env variables — UI settings are ignored.
+ ${t('org_smtpEnvOverride')}
-
+
-
+
-
+
-
+
-
+
-
+
- Test mail will be sent to the CISO e-mail (${escHtml(s.cisoEmail || '–')}).
- Please enter a CISO e-mail under Responsibilities first.
+ ${t('org_testMailDesc').replace('{email}', escHtml(s.cisoEmail || '-'))}
-
Menu Order
+
${t('org_menuOrder')}
- Drag entries with or use ↑/↓ to adjust the sidebar order.
- Dashboard, Admin and Settings are always shown.
+ ${t('org_menuOrderDesc')}
${_renderNavOrderItems(nav)}
@@ -3878,22 +3871,21 @@ async function renderAdminOrgTab() {
-
Organisational Units
+
${t('org_units')}
- Defines the IT org structure (CIO → GroupIT / GroupApp → Local IT).
- Used for ownership assignment across all modules (Risks, Assets, Suppliers, BCM, Goals, Findings).
+ ${t('org_unitsDesc')}
${entries.map(e => `
@@ -4311,7 +4303,7 @@ async function loadAuditLog() {
const curPage = Math.floor(_auditOffset / _AUDIT_LIMIT) + 1
const totPages = Math.max(1, Math.ceil(total / _AUDIT_LIMIT))
pager.innerHTML = `
- ${total} entries total
+ ${total} ${t('auditLog_total')}${curPage} / ${totPages}
@@ -4321,10 +4313,10 @@ async function loadAuditLog() {
}
async function clearAuditLog() {
- if (!confirm('Really clear the audit log? This action cannot be undone.')) return
+ if (!confirm(t('auditLog_confirm'))) return
const res = await fetch('/admin/audit-log', { method: 'DELETE', headers: apiHeaders('admin') })
if (res.ok) loadAuditLog()
- else alert('Error clearing the log.')
+ else alert(t('auditLog_clearError'))
}
// ── Admin: Daten & Wartung ────────────────────────────────────────────────────
@@ -4339,19 +4331,17 @@ async function renderAdminMaintenanceTab() {
container.innerHTML = `
- Data & Maintenance
+ ${t('maint_dataMaintenance')}
- Transition to production — server restart required
+ ${t('maint_productionRestartTitle')}
- The demo reset has set STORAGE_BACKEND=sqlite in .env.
- The change will take effect after a server restart.
- Until then the server is still running with the old backend.
+ ${t('maint_productionRestartDesc')}
- After restart, the system stores all data in data/isms.db (SQLite, WAL mode).
- JSON files are retained as a fallback backup.
+ ${t('maint_productionRestartAfter')}
-
Storage Backend
+
${t('maint_backend')}
- Loading…
+ ${t('loading')}
- JSON — for demo and development only.
- SQLite — required for production (ACID-compliant, WAL mode, no data loss on crash).
- The demo reset automatically sets STORAGE_BACKEND=sqlite in .env and
- requires a server restart afterwards.
+ ${t('maint_backendDesc')}
-
Backup & Export
+
${t('maint_backup')}
- Exports all data (templates, SoA, risks, GDPR, users, settings) as a single JSON file.
- Attachments (PDF/DOCX) are not included.
+ ${t('maint_backupDesc')}
-
Clean up orphaned attachments
+
${t('maint_cleanupOrphans')}
- Removes files from the upload directory that are no longer associated with any template.
+ ${t('maint_cleanupOrphansDesc')}
-
AI Integration (Ollama)
+
${t('maint_aiIntegration')}
- Controls semantic search and future AI features. Ollama must be installed and running locally.
- If Ollama is unavailable, features can be disabled here —
- the topbar search will then fall back to "unavailable".
+ ${t('maint_aiDesc')}
-
+
- Global switch — disables all AI features system-wide.
+ ${t('maint_aiGlobalSwitch')}
-
+
-
+
@@ -4448,10 +4431,8 @@ async function renderAdminMaintenanceTab() {
Greenbone Scan-Import
- Importiert einen Greenbone-Sicherheitsbericht (XML oder PDF) als Risiko-Entwürfe.
- Alle importierten Risiken erhalten den Status needsReview = true und
- müssen von einem Auditor oder CISO geprüft und freigegeben werden,
- bevor sie im Risikomanagement aktiv sind.
+ ${t('scanImport_descPrefix')}
+ ${t('scanImport_descSuffix')}
@@ -4483,41 +4464,36 @@ async function renderAdminMaintenanceTab() {
-
Demo Reset
+
${t('maint_demoResetTitle')}
- Exports all current demo data, then deletes all module data and users (except admin)
- and resets the admin account to adminpass without 2FA.
- The exported JSON file is automatically downloaded.
- After the reset, a notice for the administrator will appear on the login page.
+ ${t('maint_demoResetDesc')}
-
Import demo data
+
${t('maint_demoImport')}
- Restores a previously exported demo dataset. All module data will be overwritten.
- Users alice and bob will be restored with original passwords and without 2FA.
- The admin account remains unchanged.
+ ${t('maint_demoImportDesc')}
-
Login Splash Screen
+
${t('maint_splashScreen')}
- After login, show the ISMS Builder banner image for a few seconds before the dashboard opens.
+ ${t('maint_splashDesc')}
`
@@ -4836,7 +4812,7 @@ async function renderAdminTrashTab() {
}
async function restoreTrashItem(module, id, meta) {
- if (!confirm('Restore item?')) return
+ if (!confirm(t('trash_restoreItemConfirm'))) return
let url
if (module === 'template') url = `/template/${meta.type}/${id}/restore`
else if (module === 'risk') url = `/risks/${id}/restore`
@@ -4854,15 +4830,15 @@ async function restoreTrashItem(module, id, meta) {
else if (module === 'gdpr_toms') url = `/gdpr/toms/${id}/restore`
else if (module === 'public_incident') url = `/public/incident/${id}/restore`
else if (module === 'finding') url = `/findings/${id}/restore`
- else { alert('Unknown module'); return }
+ else { alert(t('trash_unknownModule')); return }
const res = await fetch(url, { method: 'POST', headers: apiHeaders('admin') })
- if (!res.ok) { alert('Restore failed'); return }
+ if (!res.ok) { alert(t('trash_restoreFailed')); return }
renderAdminTrashTab()
}
async function permanentDeleteTrashItem(module, id, meta) {
- if (!confirm('Permanently delete? This action CANNOT be undone!')) return
+ if (!confirm(t('trash_permanentDeleteConfirm'))) return
let url
if (module === 'template') url = `/template/${meta.type}/${id}/permanent`
else if (module === 'risk') url = `/risks/${id}/permanent`
@@ -4880,10 +4856,10 @@ async function permanentDeleteTrashItem(module, id, meta) {
else if (module === 'gdpr_toms') url = `/gdpr/toms/${id}/permanent`
else if (module === 'public_incident') url = `/public/incident/${id}/permanent`
else if (module === 'finding') url = `/findings/${id}/permanent`
- else { alert('Unknown module'); return }
+ else { alert(t('trash_unknownModule')); return }
const res = await fetch(url, { method: 'DELETE', headers: apiHeaders('admin') })
- if (!res.ok) { alert('Delete failed'); return }
+ if (!res.ok) { alert(t('trash_deleteFailed')); return }
renderAdminTrashTab()
}
@@ -4976,7 +4952,7 @@ const SOA_FW_META = [
async function renderAdminModulesTab() {
const container = document.getElementById('adminTabPanelModules')
if (!container) return
- container.innerHTML = '
Loading…
'
+ container.innerHTML = `
${t('loading')}
`
let cfg = { ...MODULE_CONFIG }
let fwCfg = { ...SOA_FW_CONFIG }
@@ -4992,11 +4968,9 @@ async function renderAdminModulesTab() {
container.innerHTML = `
-
System Configuration – Module Management
+
${t('modules_title')}
- Enable or disable modules according to your organisation structure and applicable standards.
- Disabled modules are hidden system-wide — for all users.
- Dashboard, Admin and Settings are always active.
+ ${t('modules_desc')}
`
}).join('')}
@@ -5024,16 +4998,13 @@ async function renderAdminModulesTab() {
-
SoA – Active Compliance Frameworks
+
${t('modules_soaFrameworks')}
- Select the frameworks relevant to your organisation. Disabled frameworks are hidden in SoA,
- Dashboard and Reports.
+ ${t('modules_soaFrameworksDesc')}
- Note: At least one framework must remain active —
- an ISMS without a compliance framework would not make sense.
- The system prevents disabling the last active framework.
+ ${t('note')}: ${t('modules_soaFrameworksNote')}
@@ -5053,7 +5024,7 @@ async function renderAdminModulesTab() {