Skip to main content
Version: 1.0.9

Compliance

Compliance presents the selected account’s posture in a format designed for internal reviews, boards, and regulatory conversations. The page is available under Reporting & Compliance for the selected account.

What it includes​

  • continuous heartbeat and ingestion continuity for the last 24 hours, a specific date, or the last 30 days;
  • automated evidence mapping to active NIST CSF and CIS control families;
  • SLA and time-to-resolution measures based on case metrics from the previous 30 complete UTC days;
  • case-resolution trends; and
  • report-version history for posture and compliance evidence.

The alert metric is taken from the selected posture report. Depending on the available report data, the evidence panel shows automated framework mapping or security posture pillars. The view may show the last synchronization time and a data-gap state. Treat a gap as a prompt to check ingestion and agent history before relying on the affected metric.

Download a compliance report​

Choose Download compliance report (PDF) to download the latest report. Administrators can use Choose report version to select an available historical audit report date; the selected report date is shown with the page’s last-updated time. SIEM+ prepares and downloads the PDF directly. The heartbeat timeline’s Specific date selection changes the data window and does not change the audit report version.

Step-by-step: review and download a compliance report​

  1. Confirm the selected account and the Last updated time.
  2. In Continuous Heartbeat, choose Last 24 hours, Specific date, or Last 30 days. For a specific date, use the date picker and select a date within the available range.
  3. Check the heartbeat legend: healthy values are above 10, degraded values are 1–10, and 0 indicates a data gap.
  4. Expand framework-mapping rows to review evidence, status, control mapping, alert count, and log coverage.
  5. Review the SLA/time-to-resolution cards, based on case metrics from the previous 30 complete UTC days, and the case-resolution trend. Alert counts come from the posture report.
  6. If the page shows a data gap or missing report, inspect ingestion and agent history before relying on the affected metric.
  7. To retrieve a historical report, administrators can first use Choose report version and note its report date. Choose Download compliance report (PDF) and wait for the PDF download to finish. The heartbeat timeline date does not select the PDF version.