{
  "id": "lib-process:security-compliance--soc2-compliance",
  "_kind": "LibraryProcess",
  "_file": "generated-library/processes.yaml",
  "_cluster": "generated-library",
  "attributes": {
    "displayName": "soc2-compliance",
    "description": "SOC 2 Compliance Preparation Process - Comprehensive SOC 2 audit readiness process covering\nTrust Services Criteria (TSC) assessment, control implementation, evidence collection, audit preparation,\nType I and Type II reporting, control testing, and continuous compliance monitoring. Implements AICPA\nSOC 2 framework across Security, Availability, Processing Integrity, Confidentiality, and Privacy criteria.",
    "libraryPath": "library/specializations/security-compliance/soc2-compliance.js",
    "specialization": "security-compliance",
    "references": [
      "- AICPA SOC 2 Trust Services Criteria: https://www.aicpa.org/soc-for-service-organizations\n- SOC 2 Trust Services Criteria (2020): https://us.aicpa.org/content/dam/aicpa/interestareas/frc/assuranceadvisoryservices/downloadabledocuments/trust-services-criteria.pdf\n- AICPA SOC 2 Guide: https://www.aicpa.org/resources/download/2017-trust-services-criteria-guide\n- SOC 2 Type II Audit Guide: https://www.aicpa.org/soc4so\n- Cloud Security Alliance SOC 2 Guidance: https://cloudsecurityalliance.org/\n- NIST Cybersecurity Framework to SOC 2 Mapping: https://www.nist.gov/cyberframework"
    ],
    "example": "const result = await orchestrate('specializations/security-compliance/soc2-compliance', {\n  organization: 'Acme SaaS Inc.',\n  reportType: 'Type II', // 'Type I' or 'Type II'\n  trustServiceCategories: ['Security', 'Availability', 'Confidentiality'], // 'Security' (required), 'Availability', 'Processing Integrity', 'Confidentiality', 'Privacy'\n  auditTimeline: '6-months', // '3-months', '6-months', '12-months'\n  scope: {\n    systems: ['production-environment', 'customer-data-platform'],\n    services: ['SaaS platform', 'API services'],\n    locations: ['US-East', 'US-West'],\n    period: { start: '2024-01-01', end: '2024-12-31' }\n  },\n  existingControls: true,\n  automateEvidenceCollection: true,\n  continuousMonitoring: true,\n  auditorSelected: false\n});",
    "usesAgents": [
      "general-purpose"
    ],
    "usesSkills": [
      "soc2-compliance-automator",
      "compliance-evidence-collector"
    ]
  },
  "outgoingEdges": [
    {
      "from": "lib-process:security-compliance--soc2-compliance",
      "to": "domain:security",
      "kind": "lib_applies_to_domain",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--soc2-compliance",
      "to": "role:security-engineer",
      "kind": "lib_involves_role",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--soc2-compliance",
      "to": "workflow:vulnerability-management",
      "kind": "lib_implements_workflow",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--soc2-compliance",
      "to": "specialization:security-compliance",
      "kind": "lib_belongs_to_specialization",
      "attributes": {
        "weight": 0.9
      }
    },
    {
      "from": "lib-process:security-compliance--soc2-compliance",
      "to": "lib-skill:security-compliance--soc2-compliance-automator",
      "kind": "uses_skill",
      "attributes": {
        "weight": 0.8
      }
    },
    {
      "from": "lib-process:security-compliance--soc2-compliance",
      "to": "lib-skill:security-compliance--compliance-evidence-collector",
      "kind": "uses_skill",
      "attributes": {
        "weight": 0.8
      }
    }
  ],
  "incomingEdges": []
}