Results & gaps

543 controls

Where every control stands across your active frameworks. Blocked and failing controls route to Remediation.

All frameworksSOC 2CIS v8PCI DSS

Covered 412 Needs your confirmation 38 Needs evidence 21 Blocked 9 Not checked 63

Covered 412 · includes 3 under exception. Click a class to see its controls.

Coverage by control family

525 of 543 controls carry family assignments · 18 render under framework-native headings · click a cell to drill

Control familySOC 2CIS v8PCI DSS

Access control

41/50

32/45

18/30

›

Audit & accountability

44/50

37/50

22/40

›

Configuration management

28/40

38/60

31/40

›

System & communications protection

27/30

34/40

40/50

›

highest-impact controls not yet covered

CIS 5.2Enforce MFA for all privileged users

Blocked→ Remediation2d

PCI 10.2Audit trail completeness on the CDE

Needs evidence→ Remediation3d

CIS 12.4Deny unauthorized network traffic by default

ConfirmYou1d

7 total · showing 2 · the one home for risk acceptances

ReferenceTarget controlStatusScopeActions

EXC-0142CIS 5.2 — MFA on legacy VPNPending2 subjectsApproveReject

EXC-0139PCI 8.3 — Service account exemptionEXCEPTEDApproved1 subjectuntil 2026-09

+ Request exception