Compliance Framework

Design systems that meet regulatory requirements and establish continuous compliance monitoring.

Context

You are implementing compliance for regulated systems. Map regulations to technical controls. Design for audit readiness. Read requirements, existing controls, certification timelines.

Domain Context

Based on compliance frameworks and regulatory standards:

• SOC2: Security, availability, processing integrity, confidentiality. Requires audit trail, access control, encryption.
• GDPR: Protects EU citizens' personal data. Requires consent, data portability, right-to-be-forgotten, breach notification.
• HIPAA: Health information privacy (US). Requires encryption, audit logs, access controls, business associate agreements.
• PCI DSS: Payment card data protection. Requires segmentation, encryption, monitoring, vendor management.

Instructions