This commit is contained in:
Flatlogic Bot 2025-10-27 20:36:28 +00:00
parent 430ac51ec8
commit 7376ed5fab

View File

@ -72,6 +72,70 @@
<p class="lead">Contribute to stronger overall governance by uniting IT, risk, compliance, finance and audit under a single umbrella of clarity and shared responsibility.</p> <p class="lead">Contribute to stronger overall governance by uniting IT, risk, compliance, finance and audit under a single umbrella of clarity and shared responsibility.</p>
</div> </div>
</div> </div>
<div class="row justify-content-center mt-5">
<div class="col-lg-8 text-center">
<h3 class="mb-4">How it works</h3>
<ol class="lead text-start">
<li>Integration of all your related tools such as Asset management, risk management Jira , Vulnerability management tool</li>
<li><strong>Log In & Workspace Overview:</strong> The user signs in securely via Single Sign-On (SSO) (Azure AD / Okta). Lands on the Organization Dashboard:
<ul>
<li>Compliance Score: 72%</li>
<li>Open Gaps: 18</li>
<li>Frameworks: NIS2 DORA ISO 27001</li>
<li>Quick actions: “Upload Evidence”, “Add Control”, “View Reports”</li>
</ul>
<p>🎯 <strong>Purpose:</strong> Give instant clarity whats secure, whats risky, what needs action.</p>
</li>
<li><strong>Upload Evidence:</strong> Click Upload Evidence Choose File (screenshot, PDF, policy, config file). Vision Copilot automatically:
<ul>
<li>Uploads the file to secure storage (S3/Blob).</li>
<li>Runs OCR/NLP to extract key data (e.g., retention=12d, MFA=off).</li>
<li>Tags evidence by domain (e.g., Logging, IAM, Vendor Risk).</li>
<li>Stores metadata: uploader, timestamp, hash (for audit integrity).</li>
</ul>
<p>🔍 <strong>Purpose:</strong> Replace tedious evidence collection with instant, machine-readable proof.</p>
</li>
<li><strong>Automatic Gap Detection:</strong> The Gap Engine compares extracted evidence data to baseline rules:
<ul>
<li>Rule: “SIEM retention 180 days”</li>
<li>Finding: “Retention = 12 days” Generates Gap #LOG-017, severity High, owner Infra.</li>
</ul>
The system maps the finding to:
<ul>
<li>NIS2 Article 21</li>
<li>DORA Annex II (ICT Logging)</li>
<li>ISO 27001 A.12.4 (Logging & Monitoring)</li>
</ul>
<p>A task is created automatically with due date & owner.</p>
<p> <strong>Purpose:</strong> Let the system find whats missing before the auditor does.</p>
</li>
<li><strong>Review & Assign Tasks:</strong> Navigate to Tasks View filters by domain, owner, severity. Each gap includes:
<ul>
<li>Linked evidence</li>
<li>Regulation references</li>
<li>Suggested remediation (“Increase retention policy to 180d”)</li>
</ul>
Managers can:
<ul>
<li>Assign owner</li>
<li>Set due date</li>
<li>Add comments or attach new evidence</li>
</ul>
<p>🧩 <strong>Purpose:</strong> Turn findings into workflows trackable, accountable, visible.</p>
</li>
<li><strong>Cross-Framework Mapping:</strong> Open Control Explorer pick any control (e.g., “Access Reviews”). See how it overlaps:
<ul>
<li>ISO 27001 A.9.2.5</li>
<li>NIS2 Annex I, Sec. 2</li>
<li>DORA Article 11</li>
</ul>
<p>Evidence uploaded once compliance credit across all frameworks.</p>
<p>♻️ <strong>Purpose:</strong> One control = multiple compliances. Stop duplicating effort.</p>
</li>
<li><strong>AI Copilot Q&A:</strong> Open Ask Copilot</li>
</ol>
</div>
</div>
</div> </div>
</section> </section>