Skip to main content
Version: 1.0.5

Compliance

Compliance presents the selected account’s posture in a format designed for internal reviews, boards, and regulatory conversations. The page is available from the Reports area for the selected account.

What it includes​

  • continuous heartbeat and ingestion continuity for the last 24 hours, a specific date, or the last 30 days;
  • automated evidence mapping to active NIST CSF and CIS control families;
  • SLA and time-to-resolution measures over the previous 30 complete days;
  • alert and case resolution trends; and
  • a board-ready evidence pack.

The view may show the last synchronization time and a data-gap state. Treat a gap as a prompt to check ingestion and agent history before relying on the affected metric.

Generate an evidence pack​

Choose Generate Compliance-Ready Report (PDF) or Generate report in the evidence-pack section. SIEM+ compiles the latest compliance posture, ingestion continuity, and remediation SLA evidence into a shareable PDF. Keep the page open while the report is being prepared, then open it from Reports when ready. Administrators can use Choose report version to review available report history and select the report date used for the evidence pack.

Step-by-step: generate an evidence pack​

  1. Confirm the selected account and the Last updated time.
  2. In Continuous Heartbeat, choose Last 24 hours, Specific date, or Last 30 days. For a specific date, use the date picker and select a date within the available range.
  3. Check the heartbeat legend: healthy values are above 10, degraded values are 1–10, and 0 indicates a data gap.
  4. Expand framework-mapping rows to review evidence, status, control mapping, alert count, and log coverage.
  5. Review the SLA/time-to-resolution cards and alert resolution trend for the previous 30 complete days.
  6. If the page shows a data gap or missing report, inspect ingestion and agent history before relying on the affected metric.
  7. Choose Generate Compliance-Ready Report (PDF) or Generate report and wait for the success notice.
  8. Open Reports and select the completed report in the built-in PDF viewer. Administrators can first select a historical version from Choose report version. Record the selected date when attaching the evidence pack to a review.