🚀 Try it out: Live Demo
A powerful web service that automatically generates policy documents based on Adobe's Common Control Framework (CCF). This tool helps organizations streamline their compliance documentation process by generating standardized policy documents that align with various security frameworks.
Adobe CCF is a security compliance framework that helps organizations meet various compliance requirements through a unified set of controls. It provides a streamlined approach to security compliance by mapping controls across multiple frameworks and standards.
- Framework Alignment: Built on Adobe CCF Open Source v5
- Multiple Output Formats: Generate policies in both Markdown and Word (.docx) formats
- Flexible Templates: Customizable policy templates with variable substitution
- Framework Mapping: Automatic mapping between different security frameworks
- REST API: Simple HTTP endpoint for easy integration
- Docker Support: Ready-to-use containerized deployment
- Visual Template Editor: Drag-and-drop interface for creating custom templates
- Modern UI: Clean, responsive interface with Adobe design elements
Visit our live demo to try the policy generator without installation.
# Pull and run the latest stable image
docker pull markac007/adobe-ccf-policy-generator:latest
docker run -p 5000:5000 markac007/adobe-ccf-policy-generator:latest
# Or use the development version
docker pull markac007/adobe-ccf-policy-generator:dev
docker run -p 5000:5000 markac007/adobe-ccf-policy-generator:dev
# Clone the repository
git clone https://github.com/markac007/adobe-ccf-policy-generator.git
cd adobe-ccf-policy-generator
# Build and run with Docker
docker build -t policy-generator ./backend
docker run -p 5000:5000 policy-generator
# Clone and install dependencies
git clone https://github.com/markac007/adobe-ccf-policy-generator.git
cd adobe-ccf-policy-generator/backend
pip install -r requirements.txt
# Run the service
python scripts/generate_policy_from_web.py
# Generate a policy document in markdown
curl -X POST http://localhost:5000/generate \
-H "Content-Type: application/json" \
-d @config.json
# Generate a Word document
curl -X POST "http://localhost:5000/generate?format=docx" \
-H "Content-Type: application/json" \
-d @config.json
{
"policy_standard": "Access Management",
"controls": ["AM-01", "AM-02"],
"frameworks": ["NIST CSF", "PCI DSS v4"],
"template_path": "custom_template.md" // Optional
}
backend/
├── src/
│ ├── __init__.py
│ └── templates.py # Template handling logic
├── scripts/
│ ├── generate_policy_from_web.py # Web service endpoint
│ └── generate_policy_from_input.py # Core generation logic
├── templates/
│ └── policy_template.md # Default template
├── static/
│ ├── css/ # Styling files
│ └── js/ # JavaScript files
└── data/
└── processed/ # Processed control data
├── control_guidance.json
├── controls_v2.json
└── controls_mapping.json
sequenceDiagram
participant Client
participant Web as Web Service
participant Gen as PolicyGenerator
participant Conv as DocumentConverter
participant Data as Data Files
Client->>Web: POST /generate
Web->>Gen: Generate Policy
Gen->>Data: Load Controls
Gen->>Gen: Process
Gen-->>Conv: Convert (if docx)
Web->>Client: Return Document
The project includes a visual template editor that allows you to:
- Create and modify policy templates
- Drag-and-drop section management
- Configure section properties
- Preview template structure
Access the template editor at http://localhost:5000/template-editor
after starting the service.
Templates support various variables for customization:
- Basic:
${policy_standard}
,${current_date}
- Controls:
${control_id}
,${control_name}
,${control_type}
- Content:
${policy_description}
,${implementation}
,${testing_procedures}
See Template Documentation for more details.
Contributions are welcome! Please read our Contributing Guidelines before submitting PRs.
- Fork the repository
- Create a feature branch
- Commit your changes
- Push to your branch
- Open a Pull Request
This project is licensed under the MIT License - see the LICENSE file for details.
- Adobe for the Common Control Framework
- Contributors and maintainers
- The security and compliance community
Found a security issue? Please report it by creating an Issue
- Create an Issue
- Update code for next CCF relase
- Enhanced template customization
- Enhanced UI for policy generation
- Batch processing capabilities
- PDF output format
- Add support for indented bullets
.