Skip to main content

Compliance Checklists

Not legal advice

This page describes technical features that can support your compliance work. It is not legal advice, and it does not establish that any system is compliant with any law, regulation or standard. You remain responsible for your own compliance assessment, independent testing and validation, and review by qualified legal and compliance professionals. See the Compliance Disclaimer.

Step-by-step checklists for achieving and maintaining compliance with major regulatory frameworks.

Available Checklists​

FrameworkDescriptionChecklist coverage
FedRAMPFederal Risk and Authorization Management Program4 of 14 controls satisfied; 10 partial
SOC 2Service Organization Control 2 Trust Services CriteriaAll criteria walked through
GDPRGeneral Data Protection Regulation5 of 9 articles satisfied; 4 partial (business process)
HIPAAHealth Insurance Portability and Accountability ActAll safeguards walked through

Using These Checklists​

Each checklist provides:

  1. Control Requirements - What the regulation requires
  2. Implementation Guidance - How to implement with Excalibur
  3. Evidence Requirements - What documentation you need
  4. Automation Scripts - Automated evidence collection where available

See Also​