Compliance
The Compliance page shows how your tenant measures up to security standards like ISO 27001 and CIS. Each framework score counts the recommendations that pass.
The Frameworks Page
Section titled “The Frameworks Page”Every active framework has a card with:
- Its name, how many controls it has, and its score
- A short description
- A bar and counts of its controls: passed, failed, not reviewed and excluded
Search frameworks to find one. Sort by Lowest score, Most failed or Name.
The dashboard shows the same scores in the Audit readiness card.
Framework Details
Section titled “Framework Details”Open a framework to see:
- Its description and when it was last scanned
- Its score, and a count of its recommendations in each state: Passed, Approved, Failed, Partial, Not reviewed, Excluded and Needs license. Click a state to filter the list
- The list of its recommendations, with the controls each one maps to
- Search recommendations, and Filters by recommendation ID
The list opens on Failed, Partial and Not reviewed. Reset to default brings that back.
Open any recommendation to see its Evidence: the data that shows whether the control is met.
Preparing for an Audit
Section titled “Preparing for an Audit”- Open the framework your auditor uses.
- Keep the default filter: Failed, Partial and Not reviewed recommendations.
- Fix what you can, using the Remediation tab and the Evidence.
- For checks Griffin31 can’t verify automatically, check them yourself, then Edit and Approve.
- For items that don’t apply, Exclude them with a reason.
Coming next: more audit-preparation features in Compliance. Watch the Release Notes.