1
0
mirror of https://github.com/strongdm/comply synced 2024-12-24 22:41:36 +00:00
comply/themes/comply-blank/TODO.md
2018-05-15 14:13:11 -07:00

1.4 KiB

{{.Name}} Compliance Program

High-level TODO created by comply

Initialization Phase (hours)

  • Add project to source control
  • Verify comply build generates valid output
  • Create ticketing credentials, configure via comply.yml
  • Verify comply sync executes without errors

Authoring Phase (weeks)

  • Validate standards/, pruning as necessary
  • Customize narratives/
  • Customize policies/
    • Distribute controls among policies
    • Ensure policies address all controls
  • Customize procedures/
    • Distribute controls among procedures
    • Create valid ticket templates
    • Assign schedules
  • Verify comply todo indicates all controls satisfied

Deployment Phase (weeks)

  • Deploy comply scheduler (see README.md for example script)
  • Deploy comply build output to shared location
  • Distribute policies to team
  • Train team on use of ticketing system to designate compliance-relevant activity

Operating Phase (eternal)

  • Monitor timely ticket workflow
  • Adjust and re-publish narratives, policies and procedures as necessary

Audit Phase (weeks, annually)

  • Import request list (tickets will be generated)
  • Fulfill all request tickets
    • Attach policies, procedures, and narratives
    • Attach evidence collected by previously-executed procedure tickets