create-filegrc 0.3.4 → 0.4.0

package/template/data/training/training-security-awareness.json

@@ -1,18 +1,16 @@
 {
-  "schemaVersion": 1,
   "id": "training-security-awareness",
   "type": "training",
   "title": "Security Awareness and Incident Response Training",
   "status": "draft",
-  "ownerIds": ["person-policy-owner"],
-  "audience": ["employees", "contractors"],
+  "ownerIds": [
+    "appointment-policy-owner"
+  ],
+  "audience": [
+    "employees",
+    "contractors"
+  ],
   "assignmentTrigger": "onboarding",
-  "recurrence": {
-    "mode": "calendar",
-    "unit": "year",
-    "interval": 1,
-    "anchorDate": "{{effective_date}}"
-  },
   "completionWindowDays": 30,
   "policyIds": [
     "policy-clear-desk-screen",

package/template/data/training/training-security-awareness.md

@@ -162,7 +162,7 @@ Report any event that could affect the confidentiality, integrity, or availabili
 ## Reporting and first actions
 
 1. Stop the unsafe action. Do not continue entering credentials, sending data, or following the request.
-2. Report the event immediately to {{security_contact_email}}. If that route is unavailable, contact {{policy_owner_name}} through an approved alternate method.
+2. Report the event immediately to {{security_contact_email}}. If that route is unavailable, contact the current Policy Owner through an approved alternate method.
 3. State what happened, when it happened, the affected account, device, system, or data, and any action already taken.
 4. Preserve the message, file, screen, device, or other evidence. Take a screenshot only when it is safe and does not expose more sensitive data.
 5. Follow response-team instructions. Remain available for questions.

package/template/data/workspace.json

@@ -1,6 +1,5 @@
 {
-  "schemaVersion": 1,
-  "dataModelVersion": "1",
+  "dataModelVersion": "2",
   "id": "workspace",
   "type": "workspace",
   "title": "{{program_title}}",
@@ -9,8 +8,20 @@
   "description": "{{program_description}}",
   "riskMethodology": {
     "method": "5x5 likelihood and impact",
-    "likelihoodScale": ["Rare", "Unlikely", "Possible", "Likely", "Almost certain"],
-    "impactScale": ["Negligible", "Minor", "Moderate", "Major", "Severe"],
+    "likelihoodScale": [
+      "Rare",
+      "Unlikely",
+      "Possible",
+      "Likely",
+      "Almost certain"
+    ],
+    "impactScale": [
+      "Negligible",
+      "Minor",
+      "Moderate",
+      "Major",
+      "Severe"
+    ],
     "ratingBands": {
       "low": "1-4",
       "medium": "5-9",
@@ -19,9 +30,9 @@
     }
   },
   "classificationDefinitions": {
-    "Public": "Approved for public release.",
-    "Internal": "Intended for the workforce and approved partners.",
-    "Confidential": "Disclosure could harm the organization, a customer, or another person.",
-    "Restricted": "Disclosure or alteration could cause severe harm or trigger legal duties."
+    "public": "Approved for public release.",
+    "internal": "Intended for the workforce and approved partners.",
+    "confidential": "Disclosure could harm the organization, a customer, or another person.",
+    "restricted": "Disclosure or alteration could cause severe harm or trigger legal duties."
   }
 }

package/template/package.json

@@ -1,6 +1,6 @@
 {
   "name": "{{project_name}}",
-  "version": "0.3.4",
+  "version": "0.4.0",
   "private": true,
   "description": "filegrc workspace for a SOC 2 program",
   "type": "module",

package/template-parameters.json

@@ -7,7 +7,12 @@
     },
     {
       "key": "policy_owner_name",
-      "prompt": "Policy owner name",
+      "prompt": "Initial program lead name",
+      "required": true
+    },
+    {
+      "key": "policy_owner_job_title",
+      "prompt": "Initial program lead organization job title",
       "required": true
     },
     {

package/template/data/people/person-policy-owner.json

@@ -1,10 +0,0 @@
-{
-  "schemaVersion": 1,
-  "id": "person-policy-owner",
-  "type": "person",
-  "title": "{{policy_owner_name}}",
-  "status": "active",
-  "email": "{{policy_owner_email}}",
-  "role": "Policy Owner",
-  "teamIds": ["team-security-risk-oversight"]
-}