Readiness posture across active frameworks. Scores are computed from mapped control evaluations, evidence freshness checks, and drift signals available to the compliance program.
Aggregate compliance scores per framework, derived from the ratio of passing controls to total mapped controls. Scores are recalculated every 24 hours from the latest evaluation data.
52/54 controls passing
Privacy Rule, Security Rule, and Breach Notification Rule safeguards. Two controls are undergoing evidence refresh.
77/87 controls passing
Trust Services Criteria across all five categories. Four controls in warning state due to upcoming vendor risk reassessment deadline.
128/156 controls passing
HITRUST CSF v11 mapping and maturity evidence are under readiness tracking. Open remediation items remain before any validated assessment claim.
Evidence artifacts are tracked for freshness against defined thresholds. Stale evidence is flagged for review to support continuous audit readiness.
Evidence collected within the defined freshness window. No action required. Automated collection pipelines are operating normally.
Evidence will exceed freshness threshold within 14 days. Auto-generated renewal tickets assigned to control owners for proactive refresh.
Evidence has exceeded the maximum freshness window. Escalated to the compliance lead for review; remediation is tracked to closure.
Configuration drift events detected by automated compliance monitoring. Drift is identified when a control's observed state deviates from the approved baseline; each event is recorded and reviewed for remediation.
| Control ID | Severity | Detected | Status |
|---|---|---|---|
AC-2.4 Account Management – Automated Audit | low | 2026-02-25 | remediated |
SC-8.1 Transmission Confidentiality – Cryptographic Protection | medium | 2026-02-23 | remediated |
IR-6.1 Incident Reporting – Automated Notification | high | 2026-02-20 | remediated |
AU-6.3 Audit Review – Correlation Analysis | medium | 2026-02-18 | open |
Readiness packages and external-review artifacts are tracked from internal draft through auditor review and formal issuance when available.