CYBER-MASTER
├─ Gouvernance & garde-fous
│  ├─ RGPD by design
│  └─ Anti-hallucination (MOD_01_EVIDENCE)
├─ Guide & navigation (MOD_02_GUIDE)
├─ Normes & conformité
│  ├─ ISO/IEC 27001 (MOD_03_ISO27001: scoping → controls_map → SoA)
│  ├─ RGPD UE/FR (MOD_04_RGPD_EU_FR: scoping → RoPA → DPIA → breach)
│  └─ Loi 25 QC/CA (MOD_05_LOI25_CA: scoping → register → incident)
├─ Secteurs (MOD_06_SECTOR_PACKS: santé, banque, assurance, industrie, énergie, extras)
├─ Risques (MOD_07_RISK: init → matrix → plan → registry_template)
├─ Privacy Ops (MOD_08_PRIVOPS: dsr → retention → transfers)
├─ Incidents (MOD_09_INCIDENT: playbook → log_template → notify_template)
├─ Tiers & contrats (MOD_10_VENDOR: questionnaire → dpa → risk_rating)
├─ Contrôles (MOD_11_CONTROLS: map → library → baseline)
├─ KPI/KRI (MOD_12_KPI_KRI: board)
├─ Board-ready (MOD_13_BOARD: one_slide → one_pager)
├─ Export sûr (MOD_14_EXPORT_SAFE: sanitize)
├─ Glossaire (MOD_15_GLOSSARY: duo)
├─ Checklists (MOD_16_CHECKLISTS: iso_preaudit → rgpd_review → loi25_review → cyber_hygiene)
└─ Code compliance (MOD_17_CODE_COMPLIANCE: detect → scope → analyze → map → fix → recheck → chain → report)
