Using The Report Center

Overview

The Dash Report Center provides teams with a way to view compliance with security and regulatory standards, including HIPAA, SOC 2, PCI DSS, ISO 27001, NIST 800-53 and GDPR. Alongside the Compliance Center, the Report Center provides another view into the organization’s state of compliance. Teams can utilize these reports to determine active controls and track evidence for security audits and questionnaires.

• Reports are available for Dash provided security programs.

• Reports provide an inventory for all requirements for the compliance framework and the show the current status of your organization's security controls.

• Report Center controls and mappings are displayed alongside Compliance Center findings.

View Reports

To view a report and all related/current controls, you can follow these steps:

1. Login to Dash ComplyOps

2. Click the “Report Center” in the Left Sidebar

3. Click the “View Controls” button for the Compliance Framework you want to view (HIPAA, SOC 2, etc)

4. Select the Scanset (environment) you want to see the current controls for.

5. After selecting a scanset you will see a full list of controls

   1. Controls are organized and listed in order based on the compliance framework requirements.

   2. Controls are shown with an overall status as:

      1. “Green” if there are no current Compliance Center or Policy Center issues

      2. “Red” if there are policies missing or uncreated for this control

6. You can expand any individual control/requirement by clicking on the row.

   1. Policy Controls - A list of policies mapped to this control.

      1. Policies show as “Red” if they have not been created in the Dash Policy Center. You can click on the policy name to be taken to this policy.

      2. Policies show as “Green” if they have been adopted in the Policy Center

   2. Technical Controls - A list of Compliance Center scans mapped to this control.

      1. Scans show as “Red” if there are active findings in the Compliance Center. You can click on the policy name to be taken to this active finding.

      2. Scans show as “Green” if there are no active findings

   3. Cloud Provider Controls - A list of all cloud provider related controls

      1. This may include architecture information, cloud service provider policies, or provided safeguards.