Frameworks
Every framework we support, and how one control counts for all of them.
ExploreSolutions · By role
Built for everyone who keeps you secure.
Each role sees what it needs and nothing more, enforced on the server. Choose a role to see what changes for them.
See the whole risk picture, and prove it is shrinking.
Before CompliLensBoard asks how secure we areRisk lives in five spreadsheetsHuman risk is invisible
Dashboard and analytics
Compliance score, open risks and trends in one view.
Human risk score
Resilience by team and attack type.
Risk register
Inherent and residual risk with linked controls.
Board-ready reports
Management review and PDF exports.
A week with CompliLens
Mon
Reviews the weekly risk trend
Tue
Approves a new phishing campaign
Wed
Shares the Trust Center with a prospect
Thu
Presents human risk to the board
What they watch
Human risk64 → 22
Open critical risks3
Readiness92%
Run the program end to end without chasing people.
Before CompliLensAudit week is a scrambleEvidence goes stalePolicies go unread
Frameworks and SoA
93 controls provisioned and mapped.
Policies
Approval, versions and timed acknowledgement.
Audits
Plan, findings, sampling and requests.
Integrations
Evidence that collects itself.
A week with CompliLens
Mon
Accepts an NCR drafted from GitHub drift
Tue
Publishes the updated access policy
Wed
Answers two auditor requests
Thu
Locks management review minutes
What they watch
Evidence complete84%
Policies acknowledged86%
Overdue CAPAs0
Treat operational risk day to day.
Before CompliLensScores vary by assessorIncidents miss deadlinesFixes do not stick
Risk register
One scoring method for every risk.
Incidents
CERT-In and GDPR clocks on every incident.
CAPA
5 Whys and an effectiveness check.
Assets and devices
Inventory and endpoint health.
A week with CompliLens
Mon
Rescores a risk after a new control
Tue
Flags an incident as CERT-In reportable
Wed
Completes a 5 Whys
Thu
Runs a failover drill
What they watch
Incidents reported on time100%
Residual riskFalling
Drills this year4
Onboard, train and offboard people securely.
Before CompliLensNew hires miss trainingLeavers keep accessPolicies signed on paper
Auto-assignment
Courses by department from day one.
Acknowledgement
Policies read and confirmed online.
Certificates
Proof for every completed course.
Leaver checks
HR system flags access to remove.
A week with CompliLens
Mon
New engineer starts: courses assigned automatically
Tue
Sends the code-of-conduct campaign
Wed
Chases overdue training in one click
Thu
Confirms leavers are deprovisioned
What they watch
Training complete94%
New hires trained in week 1100%
Leavers with access0
Check the work independently, without the email chase.
Before CompliLensEvidence arrives lateSampling is undocumentedFindings get lost
Read access
Controls, policies and evidence in one place.
Evidence requests
Ask, get notified, accept or reject.
Sampling log
Population, sample and findings recorded.
Findings
NCRs tracked to closure.
A week with CompliLens
Mon
Reads the Statement of Applicability
Tue
Samples 6 of 30 NCRs
Wed
Requests missing restore evidence
Thu
Reviews the fulfilled request
What they watch
Requests answeredSame day
Samples loggedEvery one
Folders searchedNone
Do their part, without the noise.
Before CompliLensTraining feels like a chorePolicies are hard to findUnsure how to report
Short lessons
Four minutes, on any device.
Policies
Read, confirm, done.
Report button
One click from the inbox.
Certificates
Earned and kept.
A week with CompliLens
Mon
Finishes a four-minute lesson
Tue
Reports a suspicious email
Wed
Acknowledges the updated policy
Thu
Downloads a certificate
What they watch
Time per weekMinutes
Reports creditedEvery one
Things to rememberFewer
How work moves
One phishing email, six people, no hand-offs by email
Every role sees the same record from its own side. Here is one report travelling through the team.
E09:02Employee
Reports a phishing email with one click
SL09:03Security lead
Sees the report land and the human risk score move
RM09:20Risk manager
Confirms it is real, opens an incident and starts the clocks
CM11:45Compliance manager
Links the incident to the controls it tested
HPNext dayHR & people
Sends a refresher to the team that was targeted
ANext auditAuditor
Samples the incident and finds the full trail
Access by role
Who can edit, who can read
Filled dot: can edit. Ring: read only. Dash: no access.