Automatic deployment of software applications to meet regulatory compliance requirements

摘要

A method, system, and computer program product for cloud-based deployments of software applications that are monitored for compliance with regulatory requirements. One exemplary method commences upon receiving an indication of a compliance corpus such as HIPPA or SOX, then mapping the compliance corpus to one or more predetermined configurations of a virtual compliance platform. Any of the particular predetermined configurations include steps, operations, and/or rules for provisioning infrastructure (e.g., using cloud-resident resources). After provisioning the virtual compliance platform based on the predetermined configuration, the provisioning operations further deploys a compliance monitor. The compliance monitor encapsulates the software application within the compliance monitor so as to monitor and/or log the operation and performance of the software application with respect to the compliance regulations. In some cases, a virtual compliance platform includes a virtual machine.

主权项

1. A computer implemented method for automatic deployment of software applications to meet regulatory compliance requirements, the method comprising:
providing, via a cloud service provider, a virtual compliance platform, wherein the compliance platform is configurable to provide compliance as a service to a customer; receiving a software application, the software application developed by the customer; receiving an indication of a compliance corpus, wherein the compliance corpus corresponds to a set of compliance regulations, the set of compliance regulations maintained using cloud infrastructure by the cloud service provider; mapping the compliance corpus to one or more predetermined configurations, the one or more predetermined configurations specifying a set of cloud infrastructure components corresponding to the received indication of the compliance corpus; configuring the virtual compliance platform based at least in part on the at least one of the predetermined configurations, wherein the configured virtual compliance platform hosts a compliance monitor; and encapsulating the software application within the compliance monitor.