{
  "id": "lib-process:security-compliance--security-policies",
  "_kind": "LibraryProcess",
  "_file": "generated-library/processes.yaml",
  "_cluster": "generated-library",
  "attributes": {
    "displayName": "specializations/security-compliance/security-policies",
    "description": "Security Policy Documentation Process - Comprehensive security policy development, documentation, and\nmanagement process covering information security policies, procedures, standards, and guidelines. Implements\npolicy frameworks aligned with ISO 27001, NIST, CIS Controls, and industry best practices. Includes policy\nlifecycle management, stakeholder review, approval workflows, and continuous policy maintenance.",
    "libraryPath": "library/specializations/security-compliance/security-policies.js",
    "specialization": "security-compliance",
    "references": [
      "- ISO/IEC 27001:2022 Information Security Management: https://www.iso.org/standard/27001",
      "- NIST Cybersecurity Framework: https://www.nist.gov/cyberframework",
      "- NIST SP 800-53 Security Controls: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final",
      "- CIS Controls: https://www.cisecurity.org/controls",
      "- SANS Security Policy Templates: https://www.sans.org/information-security-policy/",
      "- ISO 27002:2022 Code of Practice: https://www.iso.org/standard/75652.html",
      "- NIST SP 800-12 Security Handbook: https://csrc.nist.gov/publications/detail/sp/800-12/rev-1/final",
      "- Policy Framework Best Practices: https://www.isaca.org/resources/isaca-journal/issues/2019/volume-1/developing-an-information-security-policy-framework"
    ],
    "example": "const result = await orchestrate('specializations/security-compliance/security-policies', {\n  organization: 'Acme Corporation',\n  policyScope: ['information-security', 'data-protection', 'access-control', 'incident-response'],\n  frameworks: ['ISO-27001', 'NIST-CSF', 'CIS-Controls'],\n  industryVertical: 'financial-services', // 'healthcare', 'saas', 'ecommerce', 'fintech'\n  complianceRequirements: ['SOC2', 'GDPR', 'PCI-DSS'],\n  existingPolicies: false,\n  policyReviewCycle: 'annual', // 'quarterly', 'semi-annual', 'annual'\n  organizationSize: 'medium', // 'small' (<50), 'medium' (50-500), 'large' (>500)\n  approvalWorkflow: true,\n  versionControl: true,\n  employeeAcknowledgment: true,\n  policyTraining: true\n});",
    "usesAgents": [
      "general-purpose"
    ]
  },
  "outgoingEdges": [
    {
      "from": "lib-process:security-compliance--security-policies",
      "to": "domain:security",
      "kind": "lib_applies_to_domain",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--security-policies",
      "to": "role:security-engineer",
      "kind": "lib_involves_role",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--security-policies",
      "to": "workflow:vulnerability-management",
      "kind": "lib_implements_workflow",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--security-policies",
      "to": "specialization:security-compliance",
      "kind": "lib_belongs_to_specialization",
      "attributes": {
        "weight": 0.9
      }
    }
  ],
  "incomingEdges": []
}