Skip to content

docs(compliance): create ISO_OVERVIEW.md ecosystem summary #651

Description

@kcenon

What

Create docs/compliance/ISO_OVERVIEW.md — an ecosystem-level summary that consolidates ISO standard mappings across all kcenon systems into a single navigable index.

  • Current: Per-system compliance docs exist (or are planned) but no cross-system index
  • Expected: A single document listing every ISO standard the ecosystem touches, which systems implement which controls, and links to per-system mapping docs
  • Scope: docs only

Why

  • This is the third acceptance criterion of #645 (Ecosystem-wide ISO compliance EPIC)
  • Procurement/audit reviewers need one entry point — without an overview, they have to crawl each repo to assemble the picture
  • Keeps the EPIC's compliance posture self-documenting

Where

  • New file: docs/compliance/ISO_OVERVIEW.md
  • Modify: README.md (top-level link to the overview)

How

Technical Approach

Use the table from EPIC #645 as the structural skeleton:

Standard Systems Status Per-system doc
ISO/IEC 14882 (C++20) all Enforced via CMAKE_CXX_EXTENSIONS OFF (project-wide)
ISO/IEC 27001 (InfoSec) logger, monitoring, database Documented links
ISO/IEC 20000-1 (ITSM) monitoring Documented link
ISO 8601 (date/time) logger Implemented (link to logger feature doc)
ISO/IEC 9075 (SQL) database Documented link
ISO 12052 (DICOM) pacs Implemented (link to pacs DICOM docs)
ISO 27799 (health info) pacs Documented link

For each row include: scope summary, evidence pointer (workflow / code / doc), and any operator responsibilities.

Acceptance Criteria

  • docs/compliance/ISO_OVERVIEW.md exists with the standards × systems matrix
  • README links to the overview from a top-level "Compliance" section
  • Each cell with "Documented" links to the corresponding per-system mapping doc
  • Operator responsibilities (e.g., key rotation, retention policy) called out

Part of #645.

Dependencies

This issue can land independently, but the per-system "Documented" cells will be empty until logger and pacs companion sub-issues land. Add the matrix rows now and fill in links as those merge.

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions