comply/example/narratives/products.md

name: Products and Services Narrative acronym: PSN majorRevisions:

• date: Jun 1 2018 comment: Initial document

---

Products Narrative

Here we describe the key products marketed by our organization

Products

Product 1

Overview of product 1

Architecture

Brief architectural discussion of product 1

Security Considerations

Specific security considerations for product 1. Refer to policies, procedures here.

References

Narratives

List relevant narratives, probably including Organizational Narrative Security Narrative System Narrative

Policies

List relevant policies, probably including Application Security Policy Datacenter Policy Log Management Policy Password Policy Security Incident Response Policy Risk Assessment Policy

Procedures

List relevant procedures, probably including access review, patching, alert monitoring, log review, pen testing