Epic: Pages ATO/ATU website update and Compliance documentation

[KKAtila]

The objective of this proposal is to outline a plan to update the Pages website and upload essential security and compliance documents, including ATO/ATU process documentation, CIS/CRM materials, and others, to facilitate seamless access for our customers.

Website Update:

• Conduct a comprehensive review of the current Pages website to identify areas for improvement in terms of security and compliance documentation.
• Collaborate with the Pages engineers/web development team to implement necessary updates and enhancements to the website.

Compliance Document Upload
Gather all relevant security and compliance documents, including ATO/ATU process documentation, CIS/CRM materials, and any other pertinent documents.

• Revise and update the CIS/CRM documents in revision 5 templates to reflect the latest information and best practices (Rev5 CIS/CRM).
• Review and update the ATO/ATU process documentation outlining the necessary procedures and requirements.
• Create an updated ATU process flow slide for easy reference and understanding.

Website Integration:
Integrate a dedicated section on the Pages website specifically for security and compliance documents.

• Organize the documents into categories for ease of navigation.
• Provide clear instructions for customers on how to access and utilize the compliance documents effectively.

Communication and Publication:

• Draft an announcement email to inform customers about the website update and the availability of compliance documents.
• Draft the language to use toward updating the website, include direct links to the compliance documents and or section for easy access.
• Publish the updated compliance section of the Pages website
• If possible, monitor customer feedback and inquiries regarding the website update and compliance documents, and address any issues.

Implementation sketch

• Rev5 CIS/CRM
• ATO/ATU Process documentation
• ATU Process flow slide
• Draft the language to publish on the website
• Website Integration
• Communication and Update site Publication

Proposed Task List

Beta Give feedback

1. provide clear and documented guidance on what it takes for a Pages customer to launch a site or evaluate the compliance posture of an existing site. #4431
   squad-pages +1
   
2. Review and update the ATO/ATU process documentation outlining the necessary procedures and requirements. #4452
   2 of 2
   squad-pages +1
   
3. Conduct a comprehensive review of the current Pages website to identify areas for improvement in terms of security and compliance documentation. #4463
   3 of 3
   squad-pages +1
   
4. Gather all relevant security and compliance documents, including ATO/ATU process documentation, CIS/CRM materials, and any other pertinent documents. #4460
   3 of 3
   squad-pages +1
   
5. Revise and update the CIS/CRM documents in revision 5 templates to reflect the latest information and best practices (Rev5 CIS/CRM). #4457
   squad-pages +1
6. Create an updated ATU process flow slide for easy reference and understanding. #4458
   3 of 3
   squad-pages +1
   
7. Organize the documents into categories for ease of navigation. #4461
   2 of 3
   squad-pages +1
   
8. Provide clear instructions for customers on how to access and utilize the compliance documents effectively. #4466
   2 of 2
   squad-pages +1
   
9. Draft the language to use toward updating the website, include direct links to the compliance documents and or section for easy access. #4465
   2 of 2
   squad-pages +1
   
10. Integrate a dedicated section on the Pages website specifically for security and compliance documents. #4462
    2 of 2
    squad-pages +1
    
11. Pages collaboration with FedRAMP PMO on ATU #4472
    squad-pages +1
    
12. Collaborate with the Pages engineers/web development team to implement necessary updates and enhancements to the website. #4469
    3 of 4
    squad-pages +1
    
13. DRAFT - Guide to Understanding the Pages Authority to Use (ATU) Process #4575
    squad-pages +1
    
14. Compliance Stuff #4555
    squad-pages +1
    
15. Review and finalize the announcement email to inform customers about the website update and the availability of compliance documents. #4470
    squad-pages +1
    
16. If possible, monitor customer feedback and inquiries regarding the website update and compliance documents, and address any issues. #4468
    squad-pages +1
    
17. Make customer ATOs less scary #4554
    squad-pages +1
    

[apburnes]

Completed