Initial commit

themes/comply-soc2/procedures/README.md

@@ -0,0 +1 @@
+# TODO Describe Procedures

themes/comply-soc2/procedures/offboarding.md

@@ -0,0 +1,13 @@
+id: "offboard"
+name: "Offboard User"
+---
+
+# Onboarding Steps
+
+- [ ] Determine github username and assign to correct Org
+- [ ] Create Slack account
+- [ ] Determine and assign IAM role
+
+# Attach Evidence
+
+No evidence beyond activity logs within Slack, Github

themes/comply-soc2/procedures/onboarding.md

@@ -0,0 +1,13 @@
+id: "onboard"
+name: "Onboard New User"
+---
+
+# Onboarding Steps
+
+- [ ] Determine github username and assign to correct Org
+- [ ] Create Slack account
+- [ ] Determine and assign IAM role
+
+# Attach Evidence
+
+No evidence beyond activity logs within Slack, Github

themes/comply-soc2/procedures/patch.md

@@ -0,0 +1,11 @@
+id: "patch"
+name: "Apply OS patches"
+cron: "0 0 1 * * *"
+---
+
+# Production Environment
+
+- [ ] View patchlevel report in OpenVAS
+- [ ] Apply patches using Ansible playbooks
+    - [ ] AWS us-west-2
+    - [ ] Reston Datacenter

themes/comply-soc2/procedures/workstation.md

@@ -0,0 +1,13 @@
+id: "workstation"
+name: "Collect Workstation Details"
+cron: "0 0 * * * *"
+---
+
+# Workstation Details
+
+- [ ] E-mail all users requesting confirmation of drive encryption
+- [ ] E-mail all users requesting confirmation of antivirus / antimalware configuration
+
+# Insert Evidence
+
+Insert evidence into the Evidence Vault