Skip to main content

Analytics

The analytics module provides quantitative insights into your compliance posture, helping you make data-driven decisions about where to invest effort and how to communicate progress to stakeholders.

Compliance Score​

The primary metric is the compliance score -- a percentage representing how many of your applicable controls have current, validated evidence and no blocking findings.

Score Calculation​

score = (compliant_controls / total_applicable_controls) * 100

A control is compliant when:

  1. All required evidence artifacts are uploaded
  2. All evidence is validated (not pending or rejected)
  3. All evidence is within its freshness window
  4. No open critical or high-severity findings affect the control

Score Breakdown​

The compliance score can be broken down by:

  • Framework -- See your score for each individual framework
  • Category -- See which control categories (access control, audit logging, etc.) are strong or weak
  • Time -- View score trends over days, weeks, and months

Analytics Endpoints​

Compliance Score​

GET /api/v1/analytics/compliance-score

# Response
{
  "overall_score": 78.5,
  "total_controls": 156,
  "compliant_controls": 123,
  "framework_scores": [
    {"framework": "SOC 2 Type II", "score": 82.0, "controls": 64, "compliant": 52},
    {"framework": "ISO 27001:2022", "score": 75.3, "controls": 93, "compliant": 70}
  ]
}

Evidence Status​

GET /api/v1/analytics/evidence-status

# Response
{
  "total": 245,
  "current": 198,
  "expiring_soon": 23,
  "expired": 12,
  "pending": 12
}

Risk Summary​

GET /api/v1/analytics/risk-summary

# Response
{
  "total_risks": 34,
  "by_level": {
    "critical": 2,
    "high": 8,
    "medium": 15,
    "low": 9
  },
  "by_treatment": {
    "mitigate": 20,
    "accept": 8,
    "transfer": 4,
    "avoid": 2
  }
}

Dashboard Widgets​

The dashboard displays analytics through several visual widgets:

  • Compliance Score Gauge -- Large, prominent display of your overall score
  • Framework Progress Bars -- Per-framework completion
  • Evidence Health Pie Chart -- Current vs. expiring vs. expired evidence
  • Risk Heat Map -- Visual risk matrix showing concentration of risks
  • Activity Timeline -- Recent actions with timestamps and actors

Tips and Best Practices​

  • Track score trends -- A declining score indicates evidence is expiring faster than it is being refreshed, or new findings are outpacing remediation.
  • Set framework-specific targets -- Different frameworks may have different timelines. Set percentage targets for each framework milestone.
  • Use analytics for prioritization -- Focus remediation on the control categories with the lowest scores.
  • Report to leadership -- Generate analytics snapshots for monthly or quarterly executive updates. The compliance score trend is a powerful communication tool.