{% extends "base.html" %} {% set active_page = "compliance" %} {% block title %}FaultRay - Compliance{% endblock %} {% block page_title %}Compliance Framework{% endblock %} {% block page_subtitle %}Regulatory compliance assessment and tracking{% endblock %} {% block top_actions %} Export Report {% endblock %} {% block content %}
| ID | Control | Status | Description |
|---|---|---|---|
| {{ c.id }} | {{ c.title }} | {% if c.status == "PASS" %} PASS {% elif c.status == "PARTIAL" %} PARTIAL {% else %} FAIL {% endif %} | {{ c.desc }} |
| Category | Controls Passed | Status |
|---|---|---|
| Security | 8/9 | Partial |
| Availability | 5/5 | PASS |
| Processing Integrity | 4/4 | PASS |
| Confidentiality | 3/3 | PASS |
| Privacy | 2/3 | Partial |
ISO 27001:2022 implementation is in progress. 68 of 94 Annex A controls have been implemented. Key gaps exist in A.8 (Technology) and A.5 (Organizational) domains. Target certification date: Q3 2026.
PCI DSS v4.0 assessment is ongoing. Critical gaps in Requirement 6 (Secure Systems), Requirement 10 (Logging/Monitoring), and Requirement 11 (Regular Testing). Remediation plan targets Q2 2026 for full compliance.
| Function | Maturity | Status |
|---|---|---|
| Govern (GV) | Tier 3 | Strong |
| Identify (ID) | Tier 3 | Strong |
| Protect (PR) | Tier 2 | Moderate |
| Detect (DE) | Tier 3 | Strong |
| Respond (RS) | Tier 3 | Strong |
| Recover (RC) | Tier 2 | Moderate |