Skip to main content

How It Works

Architecture and workflows for the SirosID compliance management system.

Architecture​

Data Sources​

DirectoryContents
catalog/technical/38 platform-provided security controls
catalog/organizational/21 operator-required controls
mappings/Cross-references to EUDI, ISO 27001, GDPR
audits/Structured audit findings in YAML

Workflow​

  1. Edit controls in catalog/*.yaml, mappings in mappings/*.yaml, or audit findings in audits/*.yaml
  2. Build with make build — the generator produces OSCAL JSON and Docusaurus markdown
  3. Review the dashboard, control pages, framework mappings, and findings pages
  4. Commit the YAML source files; all generated output is gitignored
  5. Deploy automatically via GitHub Actions on push to main

Compliance Lifecycle​

For Operators​

Download the OSCAL Component Definition to import all platform-provided controls into your own GRC tool. The 21 organizational controls (governance, people, physical, operations) must be implemented per deployment.