Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Process-ID: workstation
Name: Collect Workstation Details

Procedure-ID: workstation

It would be most excellent if documents could be viewed in HTML by default, with the option to download to PDF.

Use case: It's much easier for users to access content in HTML than PDF. PDFs are hard to parse and search through imo.

Thank you!

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation

Production Environment

• View patchlevel report in OpenVAS
• Apply patches using Ansible playbooks
  • AWS us-west-2
  • Reston Datacenter

Procedure-ID: patch

• task A
• task b
• task C

Onboarding Steps

• Determine github username and assign to correct Org
• Create Slack account
• Determine and assign IAM role

Attach Evidence

No evidence beyond activity logs within Slack, Github

ok

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation

Asking for a friend. ;)

https://github.com/strongdm/comply/blob/master/internal/render/controller.go#L82

The sort algorithm in Go library sorting for example:

A1
A11
A111
A2

Instead of:
A1
A2
A11
A111

I think a fix might look something like this: https://softwareengineering.stackexchange.com/questions/127639/why-do-some-sorting-methods-sort-by-1-10-2-3

But not sure, this is low priority, visual only. I am using FISMA NIST 800-53 standards that employ this type of formating: AC-1, AC-1(1), AC-1(2), etc.

Test

After init'ing from homebrew and running comply init and following prompts, running comply build yields this:

Please install either Docker or the pandoc package and re-run `build`

Both docker and pandoc are installed. Could this be a gopath issue?

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Process-ID: workstation
Name: Collect Workstation Details

Procedure-ID: workstation

Roughly:

• Create "parent ticket" for new audit
• Read XLS or CSV
• Create ticket for each row
  • Link to parent
• Tag all tickets audit

Assignments, due dates, etc will then be conducted as per usual. Comply Dashboard will update with audit progress as tickets are resolved.

Related: Audit tickets will ideally depend on Evidence Vault (encrypted attachments)

Stuff

Process-ID: Fish

Rather than including during init, consider introducing comply standard add to emit the file at runtime into the standards directory

Stuff

Process-ID: Fish

Stuff

Process-ID: Fish

Hey Justin,

Cool project, I'm kicking the tires on using this for an upcoming compliance project.

If I or someone on my team wanted to contribute a gitlab integration, would that be ok? Do you have any contribution guidelines?

We're not a golang shop, but your github/jira implementations (in /internal) seem straight forward enough to replicate.

I would assume that we'd have to use:

https://github.com/xanzy/go-gitlab

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation

Production Environment

• View patchlevel report in OpenVAS
• Apply patches using Ansible playbooks
  • AWS us-west-2
  • Reston Datacenter

Procedure-ID: patch

Hi There
I love your code, may I donate a logo for your project?

Production Environment

• View patchlevel report in OpenVAS
• Apply patches using Ansible playbooks
  • AWS us-west-2
  • Reston Datacenter

Procedure-ID: patch

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation

I'm wondering why the requirement for Docker in the comply build? I think pandoc is the only requirement being met by Docker? For OS X people you're already doing a homebrew install. Would it be easier to install pandoc instead of requiring gigs and gigs of a docker install to be there already?

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation

Production Environment

• View patchlevel report in OpenVAS
• Apply patches using Ansible playbooks
  • AWS us-west-2
  • Reston Datacenter

Procedure-ID: patch

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation

• create ticket via comply proc
• label ticket
• find by label
• encode & parse procedure metadata
• create ticket via scheduler

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation

Risk Process refers to the a. Risk Assessment Report Template reference which does not exists in the repo. Please add.

Testing GH issue integration

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Process-ID: Fish

running on mac
version 1.2.3
docker 18.05.0-ce-mac66

$ comply init
company name
none selected for ticketing
$ comply build

panic: (model.TicketSystem) (0x14f9da0,0xc4205acbb0)

goroutine 22 [running]:
github.com/strongdm/comply/internal/model.GetPlugin(0x15f16a9, 0x4, 0x0, 0x0)
	/private/tmp/comply-20180605-74529-1jhgc11/comply-1.2.3/src/github.com/strongdm/comply/internal/model/plugin.go:55 +0x213
github.com/strongdm/comply/internal/render.load(0x2, 0x2, 0x10dfaa0, 0xc420215d80)
	/private/tmp/comply-20180605-74529-1jhgc11/comply-1.2.3/src/github.com/strongdm/comply/internal/render/controller.go:102 +0x82e
github.com/strongdm/comply/internal/render.loadWithStats(0xc420270d50, 0x9, 0xc420215d80, 0x2)
	/private/tmp/comply-20180605-74529-1jhgc11/comply-1.2.3/src/github.com/strongdm/comply/internal/render/controller.go:112 +0x26
github.com/strongdm/comply/internal/render.html(0x15f3134, 0x6, 0x0, 0xc420382300, 0xc4203668d0)
	/private/tmp/comply-20180605-74529-1jhgc11/comply-1.2.3/src/github.com/strongdm/comply/internal/render/html.go:42 +0x845
created by github.com/strongdm/comply/internal/render.Build
	/private/tmp/comply-20180605-74529-1jhgc11/comply-1.2.3/src/github.com/strongdm/comply/internal/render/site.go:97 +0x1db```

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation

Running comply scheduler creates duplicate tickets in jira

Workstation Details

• E-mail all users requesting confirmation of drive encryption
• E-mail all users requesting confirmation of antivirus / antimalware configuration

Insert Evidence

Insert evidence into the Evidence Vault

Procedure-ID: workstation