compliance-trestle
compliance-trestle copied to clipboard
As a process owner I would like to be able to generate `BI` style reports on program completion status.
Issue description / feature objectives
Using a FedRAMP SSP as a usecase there are a few metrics I would want to understand:
- Are all parameters set (e.g. non-default values)
- Is there non-default content for all controls
- Do all controls have associated responsible roles; and the completion status.
- Are there no outstanding issues for any of the controls (aka remediations that have been suggested).
Caveats / Assumptions
- Assume that reports are:
- CSVs
- Images
- Markdown documents
- A flexible framework is required
- Github integration is required.