What this module does
Records, per application, where it stands against each framework's controls. It shows what your own model's data says against a framework's requirements — never a certification or a guarantee that you pass an audit.
Record where each application stands against a framework's controls
For each application, what is implemented and what is still a gap, as your own model records it. It is never a certification and never a promise you will pass an audit.
Who it is for
Made for the people who answer for this.
- A compliance lead who has to show which controls apply to which applications.
- A security architect looking for control gaps before an audit.
Questions it answers
Ask it the questions you are asked.
Which controls does this application meet?
Asked by a compliance lead.
Where are our control gaps?
Asked by a security architect.
Which risks touch this part of the architecture?
Asked by a risk owner.
What does our own record say against this framework?
Asked by an auditor's contact.
How it works
From your data to an answer, in steps.
-
Step 1
Pick a framework
Choose the framework whose controls you track.
-
Step 2
Record each application's position
Implemented, or still a gap.
-
Step 3
Read the dashboard
See framework coverage across the estate.
-
Step 4
Follow a gap
Open the risks that touch the same part of the architecture.
Start today
Connect your tools. Get a cited answer.
Free for up to three people, with no trial clock. Self-host it free under AGPL-3.0, at any size.