Standards and frameworks provide the foundation for cybersecurity and compliance by defining the controls, requirements, and best practices organizations should implement. They serve as authoritative references for managing security, risk, and regulatory obligations across different industries. COMPASS derives controls from these standards and frameworks while maintaining traceability to the original source, ensuring compliance activities remain accurate, transparent, and auditable.
Controls associated with the standard need to be implemented for the company to remain compliant. Only Controls and tasks relevant to the company will be pushed to the COMPASS platform. Tasks need the right evidence in the form of artifacts or documents to meet the compliance criteria. Tasks with uploaded evidence need to be approved according to a set frequency for the associated control to be compliant.
Refer to: Managing Controls & Tasks on COMPASS