Compliance Dashboard
Definition
An automated reporting surface that aggregates metric and control-status data and presents it in a format aligned to one or more regulatory frameworks or internal policy requirements. Dashboards serve both internal management and external auditors as a near-real-time evidence source.
- Function
- Aggregates metric and control-status data
- Alignment
- Mapped to regulatory frameworks or internal policy
- Audience
- Internal management and external auditors
- Update cadence
- Near-real-time
Common questions
Is a compliance dashboard itself admissible as evidence in a security incident case?+
The dashboard display is usually a derived view, not primary evidence. What matters forensically is the underlying log and control data it draws from, along with the query or aggregation logic used to build the view, since an examiner needs to reproduce or validate the figures rather than accept the dashboard's summary at face value.
What is the main limitation of relying on a compliance dashboard during an investigation?+
A dashboard reflects only the metrics its designers chose to track, so a control gap outside its scope will not appear even though the underlying system is monitored. Investigators cross-check dashboard output against raw source logs and control evidence rather than treating the dashboard as a complete record.
Related terms
- Continuous Monitoring
- An automated control framework that applies fraud indicator tests to transactions as they are processed or on a frequent scheduled basis, generating...
- Control Effectiveness
- The degree to which a security control achieves its intended objective under real operating conditions. Measured through a combination of design review...
- Key Performance Indicator (KPI)
- A metric that measures how well a specific control or process is performing against a defined target. KPIs are often lagging indicators:...
- Key Risk Indicator (KRI)
- A metric that measures the level or trend of a specific risk exposure. KRIs are often leading indicators: they change before a...
- SIEM (Security Information and Event Management)
- A platform that aggregates log and event data from systems, networks, and applications across an environment, correlates events against detection rules, generates...