Adobe CCF Policy Generator

A powerful web service that automatically generates policy documents based on Adobe's Common Control Framework (CCF). This tool helps organizations streamline their compliance documentation process by generating standardized policy documents that align with various security frameworks.

Adobe CCF is a security compliance framework that helps organizations meet various compliance requirements through a unified set of controls. It provides a streamlined approach to security compliance by mapping controls across multiple frameworks and standards.

🌟 Key Features

• Framework Alignment: Built on Adobe CCF Open Source v5
• Multiple Output Formats: Generate policies in both Markdown and Word (.docx) formats
• Flexible Templates: Customizable policy templates with variable substitution
• Framework Mapping: Automatic mapping between different security frameworks
• REST API: Simple HTTP endpoint for easy integration
• Docker Support: Ready-to-use containerized deployment

🚀 Quick Start

Using Pre-built Docker Image

# Pull and run the latest stable image
docker pull markac007/adobe-ccf-policy-generator:latest
docker run -p 5000:5000 markac007/adobe-ccf-policy-generator:latest

# Or use the development version
docker pull markac007/adobe-ccf-policy-generator:dev
docker run -p 5000:5000 markac007/adobe-ccf-policy-generator:dev

Building Locally with Docker

# Clone the repository
git clone https://github.com/markac007/adobe-ccf-policy-generator.git
cd adobe-ccf-policy-generator

# Build and run with Docker
docker build -t policy-generator ./backend
docker run -p 5000:5000 policy-generator

Manual Installation

# Clone and install dependencies
git clone https://github.com/markac007/adobe-ccf-policy-generator.git
cd adobe-ccf-policy-generator/backend
pip install -r requirements.txt

# Run the service
python scripts/generate_policy_from_web.py

📚 Documentation

API Usage

# Generate a policy document in markdown
curl -X POST http://localhost:5000/generate \
     -H "Content-Type: application/json" \
     -d @config.json

# Generate a Word document
curl -X POST "http://localhost:5000/generate?format=docx" \
     -H "Content-Type: application/json" \
     -d @config.json

Example Configuration

{
    "policy_standard": "Access Management",
    "controls": ["AM-01", "AM-02"],
    "frameworks": ["NIST CSF", "PCI DSS v4"],
    "template_path": "custom_template.md"  // Optional
}

🏗️ Project Structure

backend/
├── src/
│   ├── __init__.py
│   └── templates.py          # Template handling logic
├── scripts/
│   ├── generate_policy_from_web.py    # Web service endpoint
│   └── generate_policy_from_input.py  # Core generation logic
├── templates/
│   └── policy_template.md   # Default template
└── data/
    └── processed/           # Processed control data
        ├── control_guidance.json
        ├── controls_v2.json
        └── controls_mapping.json

🔄 Workflow

sequenceDiagram
    participant Client
    participant Web as Web Service
    participant Gen as PolicyGenerator
    participant Conv as DocumentConverter
    participant Data as Data Files
    
    Client->>Web: POST /generate
    Web->>Gen: Generate Policy
    Gen->>Data: Load Controls
    Gen->>Gen: Process
    Gen-->>Conv: Convert (if docx)
    Web->>Client: Return Document

Loading

🛠️ Template Customization

The project includes a visual template editor that allows you to:

• Create and modify policy templates
• Drag-and-drop section management
• Configure section properties
• Preview template structure

Access the template editor at http://localhost:5000/template-editor after starting the service.

Templates support various variables for customization:

• Basic: ${policy_standard}, ${current_date}
• Controls: ${control_id}, ${control_name}, ${control_type}
• Content: ${policy_description}, ${implementation}, ${testing_procedures}

See Template Documentation for more details.

🤝 Contributing

Contributions are welcome! Please read our Contributing Guidelines before submitting PRs.

1. Fork the repository
2. Create a feature branch
3. Commit your changes
4. Push to your branch
5. Open a Pull Request

📝 License

This project is licensed under the MIT License - see the LICENSE file for details.

🙏 Acknowledgments

• Adobe for the Common Control Framework
• Contributors and maintainers
• The security and compliance community

⚠️ Security

Found a security issue? Please report it by creating an Issue

📞 Support

• Create an Issue

🗺️ Roadmap

• Update code for next CCF relase
• Enhanced template customization
• Enhanced UI for policy generation
• Batch processing capabilities
• PDF output format
• Add support for indented bullets

.