Compliance Management

Introduction

Compliance Packages are simple CSV templates that contain regulations, contracts, standards, etc.  Example packages include PCI, SOX, SOC2, ISO, etc.

We keep a free and open repository of the most common compliance packages used around the world that you can access anytime.

You can also create your own compliance packages.  If you can not find a template from us simply create one.  In most cases you can copy & past the content from the documentation for the standard or regulartion into any spreadsheet software.

In this guide we will explain how to create your own compliance packages and also discuss the repository of compliance packages available to the public.

Copyright

While most compliance packages and regulations are free to download in their original form from the author website some are not freely availabe (ISO is a good example). For that reason we can not make some packages public unless you can provide evidence to us that you have purchased them (by emailing support@eramba.org).

Creating your own Compliance Packages

If you want to upload your own compliance packages you need to create a CSV file and ensure it’s formatted in such a way that eramba can understand the contents. We organise compliance packages (CSV files) into “chapters” and “items”:

Chapters are made of three fields:

• ID
• name
• description

Items are made of four fields:

• ID
• name
• description
• Questions

The following example shows the column entries for PCI-DSS requirement 2 :

In the image above you see the chapter row (composed of three fields) and the item row (composed of four fields).   The PCI requirement is translated into a CSV formatted file with the chapter and item all in one straight row.

To successfully create a CSV file follow these guidelines:

• Make sure there are entries in all 7 columns
• There should be no empty cells. If you don't know what to put simply put “N/A”.
• If you are using Microsoft Excel you need to save the spreadsheet as “Windows CSV” (not DOS CSV);

Compliance Package Repository

The following table contains the list of Compliance Packages ready to import into eramba.