Skip to content

Compliance

The Compliance area is where all compliance-related tickets, projects, and tasks are managed. This includes security assessments, FedRAMP 20x Key Security Indicators (KSIs), annual security training, and data requests.

Compliance overview

Active

Assessment

Compliance assessment projects and tasks, including annual audit management and security assessment coordination.

  • Assessment - active assessment projects (e.g. annual audit management)
  • Data Requests - requests for evidence, documentation, or data needed to support assessments
  • Documentation - compliance documentation tasks and deliverables
  • Reviews and Testing - security control reviews and testing activities
  • Training - annual security training tracking and completion

KSIs

FedRAMP 20x Key Security Indicator tracking and management.

  • Open KSIs - all active KSI items
  • Open Machine-Based KSIs - KSIs validated through automated/machine-based checks
  • Open Non-Machine-Based KSIs - KSIs requiring manual validation or attestation

Validations

Each KSI and FedRAMP rule is validated on a cadence, producing a dated validation record with a Satisfied / Partially Satisfied / Not Satisfied outcome. Machine-based validations run automatically; each record carries its respond-by date, SLA timer, and the FedRAMP KSI or rule it validates. A validation that is Not Satisfied is tracked as a vulnerability until it passes again.

All Open Validations list showing KSI and rule validation records with Satisfied and Not Satisfied statuses, SLA timers, and their FedRAMP KSI and rule mappings

Other Findings

  • Open Assessment Findings - active findings from compliance assessments
  • Open Deltas - identified gaps between current state and compliance requirements
  • Closed Assessment Findings - resolved assessment findings
  • Closed Deltas - resolved compliance gaps