This repository contains YAML schemas that can be used when implementing compliance as code and/or continuous compliance.
- standardschema.yaml can be used to enforce the same format for all schema files. Useful when complying to multiple standards/regulations.
- ETSI_EN_303645.yaml contains all the provisions in ETSI EN 303 645.
- CRA.yaml CURRENTLY ONLY CONTAINS Annex I requirements from the EU Cyber Resilience Act.
For a description on what this is useful for, see the article on compliance as code and continuous compliance on the repository wiki.
NOTE: These schemas are provided as-is and may contain errors that deviate from the official documentation of the standards or regulations they refer to. Although I provide these files under a CC-BY-4.0 license, the original work on which they are based may have a different license. I have cleared my use of ETSI EN 303 645 with the ETSI legal team. The use of
EU Cyber Resilience Act is based on Decision 2011/833/EU.