2 Referencing Controls Across the Hierarchy

Compliance and Risk Management for Technical Professionals · 3:07

Listen on 93

Lyrics

[Verse 1]
One control flows through every single layer
From the top down to the ground where we prepare
Policy sets the vision, broad and clear
Standard fills the details we need to hear

[Chorus]
Four levels dancing, hand in hand
Policy, Standard, Procedure, Baseline grand
Same control, different views
Top to bottom, we can't lose
Reference up and reference down
Keep the hierarchy safe and sound

[Verse 2]
Take encryption as our guiding light
Policy says protect data in flight
Standard calls for TLS one-two or higher
Procedure shows the steps that we require

[Chorus]
Four levels dancing, hand in hand
Policy, Standard, Procedure, Baseline grand
Same control, different views
Top to bottom, we can't lose
Reference up and reference down
Keep the hierarchy safe and sound

[Bridge]
Baseline gets specific with the code
Apache settings on the server node
SSL Protocol minus all plus TLS versions high
Cipher Suite configured, security flies

[Verse 3]
When you're building controls that truly last
Connect each level to the ones that passed
Reference upward to the broader goal
Reference downward to the detailed role

[Chorus]
Four levels dancing, hand in hand
Policy, Standard, Procedure, Baseline grand
Same control, different views
Top to bottom, we can't lose
Reference up and reference down
Keep the hierarchy safe and sound

[Outro]
From boardroom vision to the command line
Every level connected by design
Same control, four different ways
Hierarchy working through all our days

← 1 Understanding the Document Pyramid | 3 Cross-Referencing Between Documents →