Frameworks

What the screen is for#

The Frameworks page lists the frameworks of the catalog, says which are active and gives the readiness of each. The score comes from the controls: a control in place counts for every requirement it covers, in every framework. See The readiness score.

Screenshot to come

Who can do what#

Anyone who can open the page reads it. To change the active frameworks you need the right to edit the statement of applicability (compliance manager or Jira administrator).

What the page shows#

• Three figures at the top: "Active frameworks", "Average readiness" and "Evidence to provide".
• For each framework: its family (Security, Privacy, AI governance, Resilience), its state (Active or Inactive), its readiness, and the detail "requirements · met · half".
• A requirement whose controls are in place but whose evidence is still to provide counts for half; the page says so.
• A requirement that no control of the catalog covers is counted as not met: it is a hole in the catalog, not work for you to do.
• A framework whose text awaits legal review carries the mention "Text awaiting legal review".

Step by step#

Activate or deactivate a framework#

1. Use the "Activate …" switch of the framework you want. The change is flagged "Will be activated when you save".
2. Click "Save frameworks". The score is recalculated.
3. "Discard changes" drops what is not saved.

Choose the SOC 2 categories#

SOC 2 is taken by service category. Security is always part of it; Availability, Confidentiality, Processing integrity and Privacy count in the score if you keep them. Categories are chosen when SOC 2 is active.

By edition#

The server checks the edition: if it does not allow the change, nothing is modified and the page says so.

Known limits#

• The frameworks in the catalog are not all assessed with the same depth: see The frameworks covered.