Put the executive summary on page 2, before the table of contents.
Some checks are pending
ci / markdown (push) Waiting to run
Some checks are pending
ci / markdown (push) Waiting to run
The cover stays page 1. Numbered chapters now start at What Verae provides. The TOC lists Executive summary at page 2.
This commit is contained in:
parent
5df7ed87d5
commit
8496ef8338
23 changed files with 759 additions and 723 deletions
|
|
@ -5,19 +5,19 @@
|
|||
<meta charset="utf-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />
|
||||
|
||||
<title>2. What Verae provides — and what it does not — Making yourself audit-ready with Verae DataCubes</title>
|
||||
<title>1. What Verae provides — and what it does not — Making yourself audit-ready with Verae DataCubes</title>
|
||||
<link rel="stylesheet" type="text/css" href="_static/pygments.css?v=5ecbeea2" />
|
||||
<link rel="stylesheet" type="text/css" href="_static/basic.css?v=b08954a9" />
|
||||
<link rel="stylesheet" type="text/css" href="_static/alabaster.css?v=2a97f0c7" />
|
||||
<link rel="stylesheet" type="text/css" href="_static/verae.css?v=050b9d5b" />
|
||||
<link rel="stylesheet" type="text/css" href="_static/verae.css?v=2d7b7068" />
|
||||
<script src="_static/documentation_options.js?v=250a654d"></script>
|
||||
<script src="_static/doctools.js?v=fd6eb6e6"></script>
|
||||
<script src="_static/sphinx_highlight.js?v=6ffebe34"></script>
|
||||
<link rel="icon" href="_static/VeraeFullLogo.png"/>
|
||||
<link rel="index" title="Index" href="genindex.html" />
|
||||
<link rel="search" title="Search" href="search.html" />
|
||||
<link rel="next" title="3. The Verae DataCube Server Solution" href="datacube-server.html" />
|
||||
<link rel="prev" title="1. Executive summary" href="executive.html" />
|
||||
<link rel="next" title="2. The Verae DataCube Server Solution" href="datacube-server.html" />
|
||||
<link rel="prev" title="Making yourself audit-ready with Verae DataCubes" href="index.html" />
|
||||
|
||||
<link rel="stylesheet" href="_static/custom.css" type="text/css" />
|
||||
|
||||
|
|
@ -61,37 +61,36 @@
|
|||
<script>document.getElementById('searchbox').style.display = "block"</script><h3>Navigation</h3>
|
||||
<p class="caption" role="heading"><span class="caption-text">Contents</span></p>
|
||||
<ul class="current">
|
||||
<li class="toctree-l1"><a class="reference internal" href="executive.html">1. Executive summary</a></li>
|
||||
<li class="toctree-l1 current"><a class="current reference internal" href="#">2. What Verae provides — and what it does not</a><ul>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#the-boundary">2.1. The boundary</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#the-tools">2.2. The tools</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#what-the-organization-must-still-do">2.3. What the organization must still do</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#why-the-distinction-matters-in-an-exam">2.4. Why the distinction matters in an exam</a></li>
|
||||
<li class="toctree-l1 current"><a class="current reference internal" href="#">1. What Verae provides — and what it does not</a><ul>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#the-boundary">1.1. The boundary</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#the-tools">1.2. The tools</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#what-the-organization-must-still-do">1.3. What the organization must still do</a></li>
|
||||
<li class="toctree-l2"><a class="reference internal" href="#why-the-distinction-matters-in-an-exam">1.4. Why the distinction matters in an exam</a></li>
|
||||
</ul>
|
||||
</li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="datacube-server.html">3. The Verae DataCube Server Solution</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="data-in-transit.html">4. Secure communications — data in transit</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="data-at-rest.html">5. Encryption at rest — IPFS blocks and Peergos</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="timestamped-receipts.html">6. Global timestamped receipts</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="peergos-eu-evaluations.html">7. Peergos security evaluations in Europe</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="global-timestamping.html">8. Verae global timestamping — a cross-blockchain receipt</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="iceberg-archive.html">9. Write-once Iceberg archive</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="architecture.html">10. Architecture for an audit interview</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="baa-dpa.html">11. BAAs, DPAs, and ciphertext without host keys</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="checklist.html">12. Audit-ready checklist</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="howto.html">13. How to use this briefing</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="bio-james-garfinkel.html">14. James H. Garfinkel</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="bio-stuart-haber.html">15. Stuart Haber</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="bio-george-lambert.html">16. George Lambert</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="contact.html">17. Verae Inc — contact</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="datacube-server.html">2. The Verae DataCube Server Solution</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="data-in-transit.html">3. Secure communications — data in transit</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="data-at-rest.html">4. Encryption at rest — IPFS blocks and Peergos</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="timestamped-receipts.html">5. Global timestamped receipts</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="peergos-eu-evaluations.html">6. Peergos security evaluations in Europe</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="global-timestamping.html">7. Verae global timestamping — a cross-blockchain receipt</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="iceberg-archive.html">8. Write-once Iceberg archive</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="architecture.html">9. Architecture for an audit interview</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="baa-dpa.html">10. BAAs, DPAs, and ciphertext without host keys</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="checklist.html">11. Audit-ready checklist</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="howto.html">12. How to use this briefing</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="bio-james-garfinkel.html">13. James H. Garfinkel</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="bio-stuart-haber.html">14. Stuart Haber</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="bio-george-lambert.html">15. George Lambert</a></li>
|
||||
<li class="toctree-l1"><a class="reference internal" href="contact.html">16. Verae Inc — contact</a></li>
|
||||
</ul>
|
||||
|
||||
<div class="relations">
|
||||
<h3>Related Topics</h3>
|
||||
<ul>
|
||||
<li><a href="index.html">Documentation overview</a><ul>
|
||||
<li>Previous: <a href="executive.html" title="previous chapter"><span class="section-number">1. </span>Executive summary</a></li>
|
||||
<li>Next: <a href="datacube-server.html" title="next chapter"><span class="section-number">3. </span>The Verae DataCube Server Solution</a></li>
|
||||
<li>Previous: <a href="index.html" title="previous chapter">Making yourself audit-ready with Verae DataCubes</a></li>
|
||||
<li>Next: <a href="datacube-server.html" title="next chapter"><span class="section-number">2. </span>The Verae DataCube Server Solution</a></li>
|
||||
</ul></li>
|
||||
</ul>
|
||||
</div>
|
||||
|
|
@ -112,9 +111,9 @@
|
|||
<div class="body" role="main">
|
||||
|
||||
<section id="what-verae-provides-and-what-it-does-not">
|
||||
<h1><span class="section-number">2. </span>What Verae provides — and what it does not<a class="headerlink" href="#what-verae-provides-and-what-it-does-not" title="Link to this heading">¶</a></h1>
|
||||
<h1><span class="section-number">1. </span>What Verae provides — and what it does not<a class="headerlink" href="#what-verae-provides-and-what-it-does-not" title="Link to this heading">¶</a></h1>
|
||||
<section id="the-boundary">
|
||||
<h2><span class="section-number">2.1. </span>The boundary<a class="headerlink" href="#the-boundary" title="Link to this heading">¶</a></h2>
|
||||
<h2><span class="section-number">1.1. </span>The boundary<a class="headerlink" href="#the-boundary" title="Link to this heading">¶</a></h2>
|
||||
<p>Verae sells and operates <strong>software infrastructure</strong> and a
|
||||
<strong>timestamping service</strong>. Customers use that infrastructure to store
|
||||
objects, to send messages, to register hashes, to verify receipts,
|
||||
|
|
@ -140,7 +139,7 @@ an Information Security Management System (ISMS) over a named
|
|||
scope. Installing a DataCube does not create an ISMS.</p>
|
||||
</section>
|
||||
<section id="the-tools">
|
||||
<h2><span class="section-number">2.2. </span>The tools<a class="headerlink" href="#the-tools" title="Link to this heading">¶</a></h2>
|
||||
<h2><span class="section-number">1.2. </span>The tools<a class="headerlink" href="#the-tools" title="Link to this heading">¶</a></h2>
|
||||
<p>Within that boundary, the Verae DataCube Solution is built to make
|
||||
the <strong>technical</strong> work of those programs less painful. Concretely,
|
||||
it gives the organization the ability to:</p>
|
||||
|
|
@ -170,7 +169,7 @@ without the log itself becoming a second copy of the sensitive
|
|||
payload.</p>
|
||||
</section>
|
||||
<section id="what-the-organization-must-still-do">
|
||||
<h2><span class="section-number">2.3. </span>What the organization must still do<a class="headerlink" href="#what-the-organization-must-still-do" title="Link to this heading">¶</a></h2>
|
||||
<h2><span class="section-number">1.3. </span>What the organization must still do<a class="headerlink" href="#what-the-organization-must-still-do" title="Link to this heading">¶</a></h2>
|
||||
<p>Those five verbs — store, communicate, timestamp, verify, audit
|
||||
— are the technical portion. The rest of a certification or
|
||||
attestation program is organizational:</p>
|
||||
|
|
@ -194,7 +193,7 @@ They will ask for evidence that the controls ran during the period,
|
|||
not that a vendor has a nice architecture diagram.</p>
|
||||
</section>
|
||||
<section id="why-the-distinction-matters-in-an-exam">
|
||||
<h2><span class="section-number">2.4. </span>Why the distinction matters in an exam<a class="headerlink" href="#why-the-distinction-matters-in-an-exam" title="Link to this heading">¶</a></h2>
|
||||
<h2><span class="section-number">1.4. </span>Why the distinction matters in an exam<a class="headerlink" href="#why-the-distinction-matters-in-an-exam" title="Link to this heading">¶</a></h2>
|
||||
<p>Examiners are trained to notice category errors. If a firm says
|
||||
“we are SOC 2 because our storage vendor was pentested in Berlin,”
|
||||
the next hour of the meeting is spent unwinding that claim. If a
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue