- Created by Jay Hill (Unlicensed) , last modified on Feb 13, 2024
You are viewing an old version of this page. View the current version.
Compare with Current View Page History
« Previous Version 4 Next »
Introduction
The product requirements document (PRD) is a central document used to align all stakeholders (product management, engineering, QA, designers, and leadership) on the overall objective and vision of the proposed product and is used as a decision-making tool.
When creating the PRD, provide just as much information as needed and nothing more. If the document is too long and complex, it will quickly become outdated, and readers will lose interest.
PRD content and structure vary by organization. Depending upon the product line, company culture, and processes, PRDs could have quite a different look and feel.
In this latest iteration of the Unified Compliance PRD template, we changed the template to help raise visibility of how the proposed product (or feature set) adheres to Unified Compliance’s strategic plan including details on why this product proposal is important to Unified Compliance.
Strategic Planning and Decision Making
Vision and Goal Setting: articulates the vision alignment, problem being addressed, and goals of the product proposal describing what the product is, who it is for, and how it will benefit the users and the organization.
Decision-Making Framework: helps in making informed decisions throughout the product development process acting as a reference point for evaluating progress and making changes.
Performance Measurement: sets the criteria for measuring the success of the product through specified metrics and key performance indicators (KPIs) including potential financial impact.
Basis for Prioritization: helps in prioritizing features based on the product strategy, market needs, and resource constraints.
How does this proposal fit into our overall vision and which specific initiative does this proposal align with and how?
The UC Strategic Plan for 2024 has two foci:
content and
the sale of that content
Content Ingestion Automation - ETL is a critical aspect of the initiative to “Partner with 3rd Party to Develop Automated Content Mapping”.
What problem are we trying to solve? and why it important to our customers and/or to Unified Compliance?
We currently rely on a team of expert mappers to meticulously add content into the UCF. The process works well but is slow. With the advent of automation and AI, Unified Compliance risks attacks from competitors who use technology to accelerate content acquisition.
We risk losing customers to other platforms if we fall behind on the extent of coverage.
We will also find it difficult to take on new market segments without automation.
Briefly describe the approach you’re taking to solve this problem. Provide enough information for the reader to imagine possible solution directions and get a rough sense of the scope of this proposal.
The approach is to start with “left-hand” side of the automation process where compliance content is captured from a small set of sources. Authority Documents, Citations, and Glossaries are extracted from those documents, transformed into the Common Data Format specification, and loaded into the UC platform. Automation tools and AI will be used to accelerate the end-to-end process within human assistance to review and approve most steps in the process.
What does success look like? What metrics can we effect and why it is important to affect those metrics?
Goal | Metric | Why Important? |
---|---|---|
Automate an end-to-end process to capture all STIG content (approximately 457 documents), perform ETL, and load into the UCF in common data format. | All 457 STIGs, as Authority Documents, are available for customer consumption via API from the UC 4.0 API Gateway All Citations as part of the 457 STIGs are available for customer consumption via API from the UC 4.0 API Gateway All Glossaries with term-definition pairs as they related to the 457 STIGs are available for customer consumption via API from the UC 4.0 API Gateway | STIGs sit at the intersection of Sec Ops and GRC. Organizations need to harden their security posture with DoD approved security measures that are in alignment with the software and hardware vendors. IT departments will utilize a variety of software and hardware in their data centers. UC needs to maximize the breadth of STIG coverage to ensure can match as many IT assets as possible. |
Automate an end-to-end process to capture all NIST-800-53 content (approximately 36 files with a mixture of json, yaml, and xml documents), perform ETL, and load into the UCF in common data format. | All NIST-800-53 content, as Authority Documents, are available for customer consumption via API from the UC 4.0 API Gateway All Citations as part of the NIST-800-53 documents are available for customer consumption via API from the UC 4.0 API Gateway All Glossaries with term-definition pairs as they related to the NIST-800-53 content are available for customer consumption via API from the UC 4.0 API Gateway | NIST 800-53 helps IT departments implement proper security controls to proactively take care of their organization's infrastructure. |
Automate an end-to-end process to capture all FedRAMP content (approximately 32 files with a mixture of json, yaml, and xml documents), perform ETL, and load into the UCF in common data format. | All FedRAMP content, as Authority Documents, are available for customer consumption via API from the UC 4.0 API Gateway All Citations as part of the NIST-800-53 documents are available for customer consumption via API from the UC 4.0 API Gateway All Glossaries with term-definition pairs as they related to the NIST-800-53 content are available for customer consumption via API from the UC 4.0 API Gateway | FedRAMP is a government-wide program that promotes the adoption of secure cloud services across the federal government by providing a standardized approach to security and risk assessment for cloud technologies and federal agencies. UC can assist federal agencies or organizations working with federal agencies to grow and use secure cloud technologies. |
Scope and Requirements
The intent of this section is for the following:
Scope Definition: defines the scope of the proposed product (or features), including what will and will not be included helping manage expectations and focus development efforts.
Guideline for Development: provides detailed information on the product’s features, functionalities, user flow, and interface to guide the development team in building the product.
Framework: provides high-level evaluation criteria for alternative solutions (build, buy, partner) to evaluate different routes to success.
Describe the product requirements that will fulfill the underserved need(s) starting off with the use cases, then specific functionality.
Requirement | Importance | Comments |
---|---|---|
|
|
|
|
|
|
List the known features that are out of scope for this project or might be revisited at a later time.
As is case with the assumptions, it is important to list these out so that architects and engineers can plan accordingly for these later updates.
Requirement | Comments |
---|---|
Mapping STIGs, NIST, FedRamp, or eCFR content to the Common Controls. | This project ends at the AD, Citation and Glossary extraction. Follow-on projects will include the mapping.
|
|
|
|
|
Link to mockups, prototypes, or screenshots related to the requirements.
Links to user journeys, process flow, or other diagrams related to the requirements.
If this project is a component to other areas or an update to an existing product, specifically call out where this product will interact with other areas.
List any open questions that come to mind throughout the lifecycle of this initiative.
Question | Answer | Date Answered |
---|---|---|
|
|
|
|
|
|
Provide a high-level evaluation criterion for alternative solutions (build, buy, partner) to evaluate different routes to success.
Milestones and Launch Checklist
The intent of this section is for the following:
Monetization: Financial impact this product will introduce (if any)
Risk Mitigation: Identifies potential risks and propose mitigation strategies.
Launch Readiness: launch checklist including high-level go-to-market plan to ensure cross-departmental alignment.
High-level Messaging: Includes Unique Selling Proposition (USP) raising visibility of the proposed solution’s value proposition.
What is the Unique Selling Proposition (USP)? Relay the key factors that separate our product from the competition and why we are the best possible solution for our prospects based on their unique needs.
Will this product be part of an existing subscription or an add-on?
Will this product be usage based or part of a subscription?
Identifies potential risks and propose mitigation strategies.
Risk | Mitigation Strategy |
---|---|
|
|
|
|
Identify any relevant milestones that people should now about. Will we “eat our own” first? Will this require a beta? and what is the target launch date?
Date | Milestone | Audience | Description |
---|---|---|---|
TBD | Dogfood 🐶 | Internal employees only. | Testing internally |
TBD | Beta 🎈 | Early cohort of X customers. | Getting user feedback |
TBD | Public Launch 🚀 | Roll-out to all users. | Let’s do it! |
This section is a reminder to the product team to make sure all relevant stakeholders are involved as necessary.
Area | Question | Answer (yes/no) | Instructions if "Yes” (or unsure) |
Customer Success | Will new training material be needed (or updates to existing classes)? |
| Talk to the Customer Success team. |
Customer Success | Do we need a new or updated onboarding experience? |
| Talk to the Customer Success team. |
Support | Will new FAQs be required (or updates to existing ones)? API documentation? |
| Talk to the Customer Support team. |
Support | Will this functionality require new support processes like new HubSpot workflows or saved replies? Or training the support team on the product? |
| Talk to the Support team. |
Growth & Data | Have we implemented sufficient tracking in order to measure success and impact on user behavior for the new feature? Will UserFlow be used? Do we need a new Power BI report? |
| Review within our Product Team |
Growth & Data | Could this impact CTAs? Or new-user-experience (NUX)? |
| Review within our Product Team |
Growth & Data | Are we turning this product or feature on for everyone immediately or are we going to use feature flags for a slow roll-out? |
| Not applicable yet until feature flags are ready to go |
Product | Are we running a Beta for this? |
| Review within our Product Team |
Marketing | Are we introducing functionality where we will want to update or create new web pages? New/updated CTAs? |
| Talk with Marketing |
Additional References
List and link to any other reference sites, documents … that might be important to the reader including the business model canvas (BMC).
- No labels