Compliance Cockpit

This is the help text the console shows in the help panel on this page.

The Compliance Cockpit (sidebar: Compliance > Compliance Cockpit) brings control status, evidence, risk and supplier compliance into one view. It is part of The Growth plan and higher; on other plans the page says the feature requires a plan upgrade. Until you start an ISO 27001 project it shows an empty state with a Go to ISO 27001 button.

What you see

• Compliance Score with a trend (Improving, Stable or Declining), broken down into Controls, Evidence, Risk, Suppliers and Supply Chain.
• Vulnerability Exposure: open findings by Critical, High, Medium and Low, with View Findings.
• Control Coverage and Control Status: each control with its Gap Status (Compliant, Partial, Missing, N/A), Evidence Age and linked risks and suppliers. Click a control to open its cross-framework view.
• Evidence Freshness: how much of your evidence is Fresh and how much is Stale.
• Risk & Exceptions: active High and Medium risks and mitigated ones, with View risk register.
• Supplier Compliance: total suppliers, compliant ones, overdue reviews and critical alerts.
• Offboarding Violations: leavers who still have active access. Click Remediate on a row to start an offboarding case for that person.
• A Framework filter to narrow the view to ISO 27001, SOC 2, PCI DSS or HIPAA.

Example

If an ISO 27001 control has no evidence uploaded for a long time, its Evidence Age grows and its evidence is flagged Stale; use the cockpit to find it before the auditor does.