Generate a `surveilr` pattern called “Compliance Explorer”

[geovlazar]

Implement a new pattern to build a web-based user interface that lists and displays SCF controls. This UI should be in alignment with provided wireframes and should support the following functionalities:

Tasks:

1. Generate RSSD from SCF Controls:

   • Download and process SCF controls from SCF website.
   • Parse and structure data into a standardized format (RSSD) for seamless integration into the web UI.

2. Develop Web UI for SCF Controls:

   • Design a listing page for SCF controls.
   • Create individual display pages for each control with detailed descriptions, categories, and any associated data.
   • Ensure the UI matches the layout and design elements provided in the wireframes.

3. UI/UX Requirements:

   • Ensure a user-friendly interface, prioritizing ease of navigation and accessibility.
   • Adhere closely to the provided wireframes to ensure consistency in layout, colors, typography, and spacing.

4. Testing & Validation:

   • Verify data accuracy and display consistency across multiple devices and screen sizes.
   • Conduct usability testing for seamless user interaction.

Acceptance Criteria:

• [ ] RSSD data generated from downloaded SCF controls is accurate and structured correctly.
• [ ] Web UI reflects the wireframe layout and meets UI/UX requirements.
• [ ] All control data displays correctly and is easily navigable.
• [ ] Content and UI undergo testing to ensure alignment with provided specifications.

Additional Notes:

• Attach screenshots of the completed UI compared to wireframes for visual validation.
• Provide documentation on how the RSSD data is generated and how to update it.

CC @arunqa @ajaykumaran

Control-Detailed-Page.pdf Landing-Page.pdf

[shanil-sasikumar]

We have released the initial version of the Compliance Explorer pattern. Here’s an update on the progress:

• Data Ingestion: Downloaded SCF controls from the SCF website and ingested them into the database using Surveilr.
• Database Structure: Created a compliance_regime table to store metadata for SCF control regimes and prepared views to facilitate access to control data from the ingested tables.

• UI Development: Developed the Web UI using SQLPage components.

  • Landing Page: Created a Compliance Explorer landing page displaying the list of Control Regimes.

  

  • Controls Listing: Listed controls for US HIPAA and NIST.

    

  • Control Details: Displayed detailed information for each control.

    

Note: This initial UI release covers US HIPAA and NIST controls from the SCF framework, as previously discussed.

[shah]

Once this is available at eg.surveilr.com/lib/pattern/compliance-explorer you can close this ticket.