# Compliance Cockpit
URL: https://docs.autociso.io/console/access/compliance/
Description: The Compliance Cockpit (sidebar: Compliance > Compliance Cockpit) brings control status, evidence, risk and supplier compliance into one view.

*This is the help text the console shows in the help panel on this page.*

The Compliance Cockpit (sidebar: **Compliance** > **Compliance Cockpit**) brings control status, evidence, risk and supplier compliance into one view. It is part of [The Growth plan](https://docs.autociso.io/getting-started/plans-and-features/) and higher; on other plans the page says the feature requires a plan upgrade. Until you [start an ISO 27001 project](https://docs.autociso.io/console/iso/projects/) it shows an empty state with a **Go to ISO 27001** button.

### What you see
- **Compliance Score** with a trend (Improving, Stable or Declining), broken down into **Controls**, **Evidence**, **Risk**, **Suppliers** and **Supply Chain**.
- **Vulnerability Exposure**: open findings by Critical, High, Medium and Low, with **[View Findings](https://docs.autociso.io/console/supply-chain/findings/)**.
- **Control Coverage** and **Control Status**: each control with its **Gap Status** (Compliant, Partial, Missing, N/A), **Evidence Age** and linked risks and suppliers. Click a control to open its cross-framework view.
- **Evidence Freshness**: how much of your evidence is Fresh and how much is Stale.
- **Risk & Exceptions**: active High and Medium risks and mitigated ones, with **[View risk register](https://docs.autociso.io/console/risk/register/)**.
- **Supplier Compliance**: total suppliers, compliant ones, overdue reviews and critical alerts.
- **Offboarding Violations**: [leavers who still have active access](https://docs.autociso.io/console/ciso-reports/offboarding-violations/). Click **Remediate** on a row to [start an offboarding case](https://docs.autociso.io/product/lifecycle/offboarding/) for that person.
- A **Framework** filter to narrow the view to ISO 27001, SOC 2, PCI DSS or HIPAA.

### Example
If an ISO 27001 control has [no evidence uploaded](https://docs.autociso.io/product/iso/upload-evidence/) for a long time, its **Evidence Age** grows and its evidence is flagged Stale; use the cockpit to find it before the auditor does.