Requirement mapping
- Identify applicable obligations
- Map each requirement to technical controls
- Assign accountable owners
Terraform Academy · governance guide
Compliance Mapping
Translate policy and regulatory requirements into specific technical controls and evidence.
Enterprise control patternEvidence-led review
Implementation
- Automate controls where practical
- Document exceptions and expiry dates
- Separate preventive, detective and corrective controls
Audit readiness
- Maintain traceability from requirement to evidence
- Review control effectiveness periodically
- Track remediation to verified closure
Completion evidence
Produce a reviewed artefact for Terraform Academy: named owner, approval date, linked evidence, unresolved risks and the next review trigger.