Skip to main content

Get a quick, actionable view of compliance

Mark Glinski
  • Updated

In this article:

    Compliance is available to all users, but issue mapping to industry frameworks for other domains' Scorecards is available with a paid SecurityScorecard plan. See our plans page for more information about levels of features and access.

    Use SecurityScorecard’s Compliance feature to leverage our robust data set to see where you stand against industry best practices as detailed in the controls of known Compliance frameworks. With a paid SecurityScorecard plan, you can also view the status of other Scorecards to monitor their vendors, and inform conversations about regulatory compliance.

    It is even possible to connect your cloud accounts to SecurityScorecard to pull in configuration data to combine with our outside-in view to provide a 360-degree view of your compliance status. Learn more.

    Add compliance frameworks

    To get started with the Compliance feature, choose which compliance frameworks you’re interested in:

    1. Go to a Scorecard and then select the Compliance tab on the left.

      compliance-select-tab.png


    2. Click + Choose Framework button on the right side.

      compliance-choose-framework.png

    3. Select each compliance framework you want by clicking Add. Then click the x in the upper-left corner of the selection panel to close it.

      compliance-add-framework.png

    As you select frameworks, they appear on the Compliance page. To remove a selected framework at any time, click Choose Frameworks on the Compliance page and then click Remove for that framework in the selection panel.

    compliance-remove-framework.png

    View compliance status

    Rows of boxes that represent controls appear under each selected framework. Each box has a color that represents one of three states:

    • Reviewed (purple) status indicates that evidence related to that control was collected, and no issues were found. Find out out to see details about evidence.

      compliance-reviewed.png

    • Conflicts (red) status indicates that evidence related to that control was collected, and issues were identified. Find out out to see details about conflicts.

      compliance-issues.png

    • No evidence (white) status indicates that no evidence related to that control has been collected yet.

      compliance-no-evidence.png

     

    See details about evidence and conflicts

    In order to dig deeper into the issues discovered for a given framework, you can click on the name of the compliance framework, and get additional information

    1. Click on the name of a framework that you are monitoring.

      compliance-get-framework-details.png

    2. In the detailed view of the framework, view the information about evidence related to conflicts.
    3. Click any control with a triangular icon, which indicates a conflict.

      compliance-framework-details.png

    4. In the side panel that appears, view the evidence related to the control. Click the evidence link to see more specific information in the issue type that we discovered in our scans.

      compliance-conflict-drawer.png

    5. View the issue summary, findings, and recommendation for addressing the issue.

      compliance-issue-type.png


    Pull in data from inside your organization

    While SecurityScorecard's continuous scanning provides a robust set of “outside-in” data , we want to give you a full 360° view of your organization’s compliance. We are enabling you to integrate with your existing cloud accounts, and pull in relevant configuration data. Learn more.

    See also

    Get help

    If you need help or have questions, submit a Support request.



    Related articles