<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: building-compliance-awareness-programs
description: >-
  Build compliance awareness programs covering regulatory requirement training,
  audit preparation, evidence collection procedures, policy acknowledgment
  workflows, and continuous compliance monitoring for SOX, PCI DSS, and HIPAA.
domain: cybersecurity
subdomain: security-awareness
tags:
  - compliance
  - regulatory
  - audit-preparation
  - evidence-collection
  - policy-acknowledgment
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: []
---

# Building Compliance Awareness Programs

## Overview

Compliance awareness programs ensure employees understand regulatory obligations
and their role in maintaining compliance. This skill covers regulatory requirement
training by role, audit preparation and evidence collection, policy acknowledgment
workflows, continuous compliance monitoring dashboards, and gap remediation
training programs.

## Prerequisites

| Requirement | Install |
|---|---|
| GRC platform | ServiceNow GRC, Archer, or Drata |
| Policy management | PolicyTech, PowerDMS, or equivalent |
| Standards | SOX, PCI DSS, HIPAA, SOC 2, ISO 27001 |

## Commands

| Command | Description |
|---|---|
| `node agent.js reg-training --regulation pci-dss --audience cardholder-data-handlers` | Generate regulation-specific training for target audience |
| `node agent.js audit-prep --standard sox --timeline 90-days` | Build audit preparation training and timeline |
| `node agent.js evidence --controls access-review,change-mgmt,logging` | Create evidence collection procedure training |
| `node agent.js acknowledgment --policies aup,data-handling,incident --workflow annual` | Design policy acknowledgment workflow |

## Workflow

### Step 1 — Assess Current State

Evaluate existing capabilities and identify gaps before implementing changes.

```bash
# Run assessment with agent tooling
node agent.js reg-training --regulation pci-dss --audience cardholder-data-handlers
```

### Step 2 — Plan and Design

Define objectives, scope, timeline, and success criteria.

```bash
# Plan implementation
node agent.js audit-prep --standard sox --timeline 90-days
```

### Step 3 — Execute and Deliver

Implement the planned activities and deliver outputs.

```bash
# Execute delivery
node agent.js evidence --controls access-review,change-mgmt,logging
```

### Step 4 — Measure and Optimize

Track results against success criteria and iterate.

```bash
# Measure results
node agent.js acknowledgment --policies aup,data-handling,incident --workflow annual
```

## Verification

- [ ] Prerequisites validated and tools installed
- [ ] Assessment of current state completed
- [ ] Implementation plan documented and approved
- [ ] Execution completed per plan
- [ ] Results measured against defined KPIs
- [ ] Findings documented and next steps identified
