Skip to main content
Version: Next 🚧

Compliance Overview

Cert-IX Compliance helps you manage regulatory requirements, security frameworks, and internal policies to maintain a strong compliance posture.

Compliance Features​

Framework Management​

Track compliance with security frameworks:

  • NIST Cybersecurity Framework
  • ISO 27001
  • SOC 2
  • CIS Controls
  • Custom frameworks

Learn more →

Policy Management​

Create and enforce security policies:

  • Policy creation
  • Policy distribution
  • Compliance tracking
  • Exception management

Learn more →

Audit Support​

Prepare for and manage audits:

  • Evidence collection
  • Audit preparation
  • Finding tracking
  • Remediation

Learn more →

Compliance Dashboard​

Overview Metrics​

  • Overall compliance score
  • Framework compliance
  • Policy compliance
  • Upcoming deadlines

Compliance Status​

  • Compliant controls
  • Partially compliant
  • Non-compliant
  • Not assessed

Action Items​

  • Required actions
  • Approaching deadlines
  • Recent changes
  • Priority items

Getting Started​

Step 1: Select Frameworks​

  1. Navigate to Compliance → Frameworks
  2. Browse available frameworks
  3. Select applicable frameworks
  4. Configure scoping

Step 2: Map Controls​

  1. Review framework controls
  2. Map to your systems
  3. Assign owners
  4. Document implementation

Step 3: Assess Compliance​

  1. Conduct assessments
  2. Gather evidence
  3. Document status
  4. Track gaps

Step 4: Remediate Gaps​

  1. Prioritize findings
  2. Create remediation plans
  3. Implement fixes
  4. Verify compliance

Compliance Workflows​

Continuous Compliance​

Ongoing compliance management:

  • Automated assessments
  • Real-time monitoring
  • Continuous evidence
  • Drift detection

Periodic Assessment​

Scheduled compliance reviews:

  • Quarterly reviews
  • Annual assessments
  • Pre-audit checks
  • Certification renewals

Exception Management​

Handle compliance exceptions:

  • Exception requests
  • Approval workflows
  • Time-limited exceptions
  • Compensating controls

Evidence Management​

Evidence Collection​

  • Automatic collection
  • Manual uploads
  • System integrations
  • Evidence linking

Evidence Types​

  • Configuration screenshots
  • Log exports
  • Policy documents
  • Procedure documentation

Evidence Lifecycle​

  • Collection
  • Review
  • Approval
  • Archival

Reporting​

Compliance Reports​

  • Executive summary
  • Framework status
  • Gap analysis
  • Remediation progress

Audit Reports​

  • Audit evidence packages
  • Control documentation
  • Assessment results
  • Historical trends

Custom Reports​

  • Selected frameworks
  • Date ranges
  • Specific controls
  • Export formats

Regulatory Support​

Industry Regulations​

Support for:

  • GDPR (data privacy)
  • HIPAA (healthcare)
  • PCI DSS (payment)
  • SOX (financial)

Regional Requirements​

  • US regulations
  • EU regulations
  • Regional specifics
  • Country-specific rules

Best Practices​

  1. Start with frameworks - Establish compliance baseline
  2. Map completely - Cover all controls
  3. Assign owners - Clear accountability
  4. Collect evidence continuously - Don't scramble before audits
  5. Track gaps - Know your non-compliance
  6. Remediate promptly - Fix issues quickly

Next Steps: