Skip to main content
Compliance shows how many objectives of the activated frameworks the organization has fully implemented. Each framework breaks down into objectives that are assessed individually.

​
Frameworks, laws, and objectives

Framework is the umbrella term for what compliance is measured against. The interface distinguishes four types: Standard, Law, Catalog, and Custom. Active frameworks of all four types appear together under Active Frameworks in the overview. Every framework also carries a short code derived from its issuing body, for example “ISO” for “ISO/IEC”. The framework’s detail page shows the Publisher in full. A framework breaks down into objectives—the assessable leaves of a tree. Structural sub-headings above them are not themselves assessable and stay visible as context rows for as long as a visible objective remains beneath them. Every objective has a detail page of its own where it is assessed—see Objectives.

​
Origin and activation

Frameworks sit ready as available entries and are activated by the organization. On first activation, Docusnap365 imports all of the framework’s objectives and creates their assessment. If a framework is deactivated and later reactivated, its assessments, justifications, review dates, and relations to controls and documents are kept—a fresh import does not run again.
Deactivating deletes no assessment. The number of complete and applicable objectives from before deactivation stays visible on the available framework’s tile.

​
Objective status and completeness

Every objective of a framework carries one of five statuses: A framework shows how many of its applicable objectives are Complete, as a number and as a percentage. Applicable covers all objectives except those explicitly excluded as Not applicable.
An unconfirmed objective, whose applicability has not been decided yet, also counts as applicable. Every applicable objective that is not Complete counts as a gap: Pending, Not implemented, Partial, and unconfirmed objectives. Assessed counts the applicable objectives with any status other than Pending.
Mark objectives your organization is not concerned by as Not applicable—otherwise they count as applicable and as gaps.

​
Controls, documents, and assets

An objective can be linked to controls, documents, and assets. Linking to an asset ties the assessment to a system Docusnap365 has actually inventoried, not just to a statement in the framework. You can also create a new control directly from an objective’s detail page.

​
Limits

The number of complete objectives is a self-assessment by the organization: it reflects what was classified as Complete or Not applicable, not an external audit. Activate and Assess Frameworks covers activation and bulk editing, Objectives the assessment of a single objective. The compliance dashboard’s KPIs are covered in Check Compliance Status. ISMS Fundamentals places compliance next to risk management.