Controls
Every control across your org, your code, and your AI systems. Each maps once to the requirements of every framework it satisfies.
8/12
Passing
| Control | Frameworks | Status | Source | Expert | Evidence | Last checked |
|---|---|---|---|---|---|---|
AC-2 MFA enforced on all accounts | Passing | Org | JO | 3 files | 2 min ago | |
AC-7 Quarterly access reviews | Failing | Org | None | Add | 1 hr ago | |
VR-1 Vendor risk assessments | In review | Org | None | 2 files | yesterday | |
GV-1 Information security policy | Passing | Org | JO | 1 files | 3 hr ago | |
DP-3 Data encrypted at rest and in transit | Passing | Org | JO | 4 files | 2 min ago | |
BC-2 Backups tested and recoverable | Passing | Org | JO | 2 files | yesterday | |
AI-1 No indirect prompt-injection paths | Passing | AI | JO | 1 files | 4 min ago | |
AI-2 Agent tool access allowlisted | Passing | AI | JO | 1 files | 14 min ago | |
SC-4 No secrets in source or prompts | Failing | Code | None | Add | 1 hr ago | |
SC-1 Dependencies free of known CVEs | Passing | Code | None | 2 files | 8 min ago | |
SC-2 Static analysis on every PR | In review | Code | None | 1 files | 30 min ago | |
LM-1 Audit logging on critical systems | Passing | Org | JO | 3 files | 1 hr ago |