Procedure.json

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "$id": "#Procedure",
  "description": "A written procedure and control documentation. A Procedure typically `IMPLEMENTS` a parent Policy. An actual Control further `IMPLEMENTS` a Procedure.",
  "type": "object",
  "allOf": [
    {
      "$ref": "#RecordEntity"
    },
    {
      "properties": {
        "title": {
          "description": "Title of the procedure",
          "type": "string"
        },
        "summary": {
          "description": "Summary or overview the describes the procedure. Summary text is intended as guidance to the author and not included in the published version.",
          "type": "string"
        },
        "author": {
          "description": "Author of the record",
          "type": "string"
        },
        "content": {
          "description": "Text content of the policy. For policies/procedures used by the Policy Builder app, this will contain the template text in markdown format. Stored in raw data.",
          "type": "string"
        },
        "control": {
          "description": "The type of control specified by this procedure.",
          "type": "string",
          "examples": [
            "administrative",
            "technical",
            "physical",
            "operational",
            "other"
          ]
        },
        "applicable": {
          "description": "Indicates if procedure is applicable based on the organization's current risk and compliance needs. A Policy that is not applicable may become applicable later as the organization's requirements and maturity change.",
          "type": "boolean"
        },
        "adopted": {
          "description": "Indicates if procedure has been adopted. Only adopted policies and procedures are included in the published view of the Policy Builder app.",
          "type": "boolean"
        }
      },
      "required": ["title", "summary", "content"],
      "excludes": ["category", "reporter"]
    }
  ]
}