The Fine Print

from crewai import Agent, Task, Crew, Process
from langchain_openai import ChatOpenAI
llm = ChatOpenAI(model="gpt-4-turbo", temperature=0)
# Define Swarm Agents
soc2_agent = Agent(
    role='SOC2 Lead Auditor',
    goal='Evaluate policies against AICPA Trust Services Criteria.',
    backstory='Strict, detail-oriented auditor focusing on Security and Confidentiality TSCs.',
    verbose=True,
    llm=llm
)
iso_agent = Agent(
    role='ISO27001 Lead Auditor',
    goal='Evaluate policies against ISO 27001:2022 Annex A controls.',
    backstory='Methodical assessor focusing on ISMS processes and risk treatment.',
    verbose=True,
    llm=llm
)
cae_agent = Agent(
    role='Chief Audit Executive',
    goal='Synthesize framework-specific audits into a unified compliance gap report.',
    backstory='Strategic GRC leader who builds unified control frameworks to satisfy multiple audits.',
    verbose=True,
    llm=llm
)
# Simulated Corporate Policy
corporate_policy = """
Policy Name: Remote Access Policy
Users must use a VPN to access the internal network. Passwords must be 12 characters long and changed every 90 days. Users are not allowed to share accounts.
"""
# Tasks
soc2_task = Task(
    description=f'Audit this policy against SOC2 Logical Access controls (CC6.1, CC6.2): {corporate_policy}',
    expected_output='List of SOC2 gaps (e.g., MFA missing).',
    agent=soc2_agent
)
iso_task = Task(
    description=f'Audit this policy against ISO27001 Annex A (Access Control): {corporate_policy}',
    expected_output='List of ISO27001 gaps.',
    agent=iso_agent
)
consolidation_task = Task(
    description='Review the SOC2 and ISO27001 gaps. Create a unified action plan for the IT team to update the policy to satisfy BOTH frameworks.',
    expected_output='A consolidated, prioritized list of policy updates.',
    agent=cae_agent,
    context=[soc2_task, iso_task]
)
# Run Swarm
grc_swarm = Crew(
    agents=[soc2_agent, iso_agent, cae_agent],
    tasks=[soc2_task, iso_task, consolidation_task],
    process=Process.sequential
)
if __name__ == "__main__":
    print("Initiating GRC Swarm Audit...")
    report = grc_swarm.kickoff()
    print("\n--- Unified Compliance Report ---\n")
    print(report)