Compliance management with LDAP support

An document and follow-up web site with ldap integration and a quiz module. ## Deliverables A system with a working ldap integration where users are able to sign in and take some quizzes that the administrator have made (the administrator is a local user and not a ldap user). Besides quizzes the administrator should be able to create security policies, compliance policies, security manuals etc. all these "modules" is going to work the same way. The admin chooses an existing policy or creates a new one from an empty template. A nice feature would be if the admin could upload an existing policy/manual (pdf or ms word format) and then have the system generating the policy/manual from the index ind the uploaded file, but i don't know how difficult that would be to develop. A policy/manual consists of several elements. Each element is an element in some sort of treeview, when clicking on the element it opens up in ckeditor for edit. The admin can rearrange each element with drag and drop in the treeview and then the caption of the element changes name to mach the order the element is in. There should be maintained a log of the changes made to the elements To each element the admin can set on or more responsible. A responsible is typically an manager in the organization. The admin can also set an executive witch is typically an technical engineer. The admin then sets a date for the system to send a mail to the responsible and the executive. This mail is auto generated by a template and the mail. The manager or executive then logs in to the system and checks that their element in the manual/policy is correct. The admin can then see how many elements is correct/up-to-date and how many there isn't. If the manager/executive isn't making the check before end of deadline the admin should see a notice in his dashboard. The mail system should also be able to send reminders. The ldap integration should make it possible to "group" people based on their ldap structure, so that when you choose which responsible/executive you would like to send a mail to, you can choose a self created group. This should also be implemented in the quiz module, so that you can make a quiz targeted to managers, technical staff etc. The highest policy in the system is the risk policy, then comes the security policy, then comes the security manual and the compliance policy. Each element in the security policy should be able to be mapped to an element in the risk policy, each element in the security manual should be able to be mapped to the security policy. Each element should be assigned a status that indicates if the element is assigned an manager/executive, if it is controlled, if the date it should be checked is delayed etc. I'am not quite how the quiz module should be developed, but the easiest way would properly be to make a bank of questions each with 1 or more answers that could be yes or no answers or multiple choice. When generating the quiz the admin can choose how many questions theer should be on each "html site" in the quiz, the background colour etc. The quiz should be able to be saved for later use, and the admin should be able to choose if it is an anonym quiz or not. When the quiz is generated and the target is selected either individual users or admin generated groups (like mentioned before) an mail is sent to the target user(s) with a link to the quiz. If the quiz is anonym the users should not log in to the system, but if isen't the users should log in with their ad account. Upon successful completion he user should recieve a certificate. The certificate would be an autogenerated pdf withe a picture (the certificate) with the users name printed. This is the basic functionality of the site. The basic sturcture of the site is already made (in php, jquery and mysql), but due to lack of time in the porject i would like to hear how much it would cost to make the project finish. If the price is right i would also like to discuss how much it would cost to implement a complete webservice module to all the functions, including the functionality to make it possible for to installations to talk to each other (in the case of outsourcing etc.). Also i would like to now how much it would cost to develop a admin/user dashboard including highcharts (how many have completed each quizz, how many have answered correct, how compliant are we on the policy, manual etc.), but also a dashboard where the admin/user can see messages/tasks when they sign in. Note: Most of the html/css and jquery is already made (see picture)