Regulatory to Code Translator & Security Control Mapper
Describe the problem that was observed. What is wrong?
Describe the high-level action required to fix the deficiency.
Describe the specific, desired state or configuration that should be in place.
Cite the specific rule, standard, or policy being measured against (the 'why').