Controls ready6
173
of 320 library
Program readiness2.1pp
77%
weighted frameworks
Open gaps4
18
gap score ≥ 55
Stale evidence5
65
age ≥ 90 days
Failing tests2
70
continuous monitors
Fail / partial43
104
43 not tested
Ready controls vs open gaps
Northline Systems · daily
ReadyGaps
Mon SOC 2 evidence refresh waveWed Access domain test suiteThu Policy review boardSat Stale evidence alert
Controls by status
320 library
173
Pass
69
Partial
35
Fail
43
Not tested
Failing-test gaps
linked monitors
| Code | Control | Gap |
|---|---|---|
| A.8.9 | Configuration management | 74 |
| GDPR-32.4 | Clock sync (availability) | 74 |
| CC6.1 | Logical access controls | 66 |
| PCI-8.2 | Strong authentication | 66 |
| PCI-11.14 | Penetration testing | 66 |
| PCI-2.15 | DPA coverage | 66 |
| CC8.4 | Red team findings (confidentiality) | 66 |
Highest gap controls
unique · by gap score
| Code | Control | Domain | Gap | Top signal |
|---|---|---|---|---|
| A.8.9 | Configuration management | Operations | 74 | Control status Fail |
| GDPR-32.4 | Clock sync (availability) | Availability | 74 | Control status Fail |
| CC6.1 | Logical access controls | Access | 66 | Control status Fail |
| PCI-8.2 | Strong authentication | Access | 66 | Control status Fail |
| PCI-11.14 | Penetration testing | Privacy | 66 | Control status Fail |
| PCI-2.15 | DPA coverage | Access | 66 | Control status Fail |
| CC8.4 | Red team findings (confidentiality) | Confidentiality | 66 | Control status Fail |
| HR.6 | Remote access | Access | 62 | Control status Partial |
Program health
weighted framework readiness
77
score
Controls ready173 / 320
High-gap controls18
Stale evidence65
Failing tests70
Framework readiness
top programs
SOC 284% · 11 gaps
ISO 2700176% · 14 gaps
HIPAA71% · 9 gaps
PCI DSS68% · 12 gaps
GDPR81% · 5 gaps
NIST CSF79% · 7 gaps
Agent · this week
acts, you approve on Gaps
6
Done
4
Pending approval
- Evidence chasedRequested fresh MFA coverage export from identity integrationMon 09:12 · CC6.1
- Mapping proposedMap log-retention config to ISO A.8.15 + SOC 2 CC7.2Mon 11:40 · A.8.15
- Owner nudgedNudged Elena V., config baseline review 34d overdueTue 08:05 · A.8.9
- Remediation draftedDual-approval enforcement on change pipeline for CC8.1Tue 14:22 · CC8.1
Root-caused alerts
symptom → fix
Do this next
scored impact ÷ effort × confidence
| Action | Impact | Effort | Conf | Why |
|---|---|---|---|---|
| Close CC6.1 logical access gap | 94 | 3 | 88% | Fail + stale evidence + failing MFA test |
| Attach baseline evidence to A.8.9 | 86 | 2 | 90% | No evidence · critical config control |
| Refresh 37 stale evidence items | 78 | 2 | 85% | Staleness board · age ≥ 90d |
| Remediate 11 failing tests | 82 | 4 | 80% | Continuous monitors blocking readiness |