synos-compliance-runner — Automated Compliance Assessment
tags: [general]
synos-compliance-runner — Automated Compliance Assessment
Section titled “synos-compliance-runner — Automated Compliance Assessment”Classification: PUBLIC
Crate: fruit/crates/synos-compliance-runner/
Milestone: v41+
License: MIT OR Apache-2.0
What It Is
Section titled “What It Is”synos-compliance-runner performs automated compliance assessments across
multiple frameworks: NIST SP 800-53, ISO 27001, PCI DSS, GDPR, SOX, HIPAA,
and FedRAMP Moderate. It evaluates system configurations against control
baselines and produces audit-ready reports.
Architecture
Section titled “Architecture”Supported Frameworks
Section titled “Supported Frameworks”| Framework | Controls | Source |
|---|---|---|
| NIST SP 800-53 | 800+ controls | fruit/crates/syn-security/compliance/nist/ |
| ISO 27001 | 114 controls | fruit/crates/syn-security/compliance/iso27001/ |
| PCI DSS | 12 requirements | fruit/crates/syn-security/compliance/pci/ |
| GDPR | 99 articles | fruit/crates/syn-security/compliance/gdpr/ |
| SOX | 10 controls | fruit/crates/syn-security/compliance/sox/ |
| HIPAA | 18 identifiers | fruit/crates/syn-security/compliance/hipaa/ |
| FedRAMP Moderate | 325 controls | fruit/crates/syn-security/compliance/fedramp/ |
How It’s Wired
Section titled “How It’s Wired”- syn-security — reads security configurations from the syn-security crate
- synos-audit-trail — logs all assessment results for audit purposes
- synos-compliance-dashboard — feeds assessment results to the web dashboard
- synos-tenant — enforces tenant-scoped compliance policies
Future Ideas
Section titled “Future Ideas”- Continuous compliance — real-time monitoring instead of batch assessments
- Auto-remediation — suggest or apply fixes for non-compliant configurations
- Evidence collection — automated evidence gathering for auditors
- Cross-framework mapping — map controls between frameworks automatically