|
2 | 2 |
|
3 | 3 | GraphGRC is data-driven documentation for a GRC program. |
4 | 4 |
|
5 | | -See [source code](https://github.com/alsmola/graphgrc/) and a [published documentation example](https://alsmola.github.io/graphgrc/). |
| 5 | +**[View Live Example →](https://alsmola.github.io/graphgrc/custom/)** |
6 | 6 |
|
7 | | -- Semantic: GRC program requirements (SOC 2, GDPR, etc.) parsed, structured, and rendered with Markdown |
8 | | -- Linkable: Map similar controls from different frameworks with a custom control framework |
9 | | -- Practical: Minimal, risk-focused control framework (24 controls) tailored for modern organizations |
| 7 | +## What is this? |
| 8 | + |
| 9 | +A practical, minimal control framework (24 controls) tailored for modern AWS SaaS organizations. Focuses on risk-reducing behaviors over checkbox compliance, with bidirectional mappings to SOC 2 and GDPR requirements. |
| 10 | + |
| 11 | +**Key features:** |
| 12 | +- **Semantic:** GRC requirements (SOC 2, GDPR) parsed, structured, and rendered as navigable Markdown |
| 13 | +- **Linked:** Bidirectional mappings show how controls satisfy multiple framework requirements |
| 14 | +- **Practical:** Implementation guidance for real-world AWS SaaS environments (~100 people, macOS endpoints, cloud-native) |
10 | 15 |
|
11 | 16 | ## Published Documentation |
12 | 17 |
|
13 | | -The published example uses a custom control framework (24 controls) tailored for AWS SaaS organizations with ~100 people and macOS endpoints. Focuses on risk-reducing behaviors over checkbox compliance. |
| 18 | +Browse the live example at **[alsmola.github.io/graphgrc/custom](https://alsmola.github.io/graphgrc/custom/)** |
14 | 19 |
|
15 | | -**View the documentation:** |
16 | | -- [Custom Controls](custom/index.md) - 24 controls with implementation guidance |
17 | | -- [SOC 2](soc2/index.md) - Mapped to custom controls |
18 | | -- [GDPR](gdpr/index.md) - Mapped to custom controls |
| 20 | +The published site includes: |
| 21 | +- [**24 Custom Controls**](https://alsmola.github.io/graphgrc/custom/) - Organized by security domain with implementation guidance |
| 22 | +- [**SOC 2 Mappings**](https://alsmola.github.io/graphgrc/soc2/) - Each requirement linked to relevant controls |
| 23 | +- [**GDPR Mappings**](https://alsmola.github.io/graphgrc/gdpr/) - Each article linked to relevant controls |
19 | 24 |
|
20 | 25 | **Organization profile:** AWS SaaS, no physical datacenters, ~100 people, macOS endpoints, modern security practices (WebAuthn, full disk encryption, cloud-native) |
21 | 26 |
|
|
0 commit comments