CaveloInstall

Summary

Perform compliance analysis on security benchmarks against selected compliance frameworks and levels, including optional compliance scoring and gap analysis.

Inputs

• Compliance Frameworks — Select one or more compliance frameworks (e.g., NIST, ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) to evaluate the benchmarks against.
• Include Compliance Scoring — Choose whether to include compliance scoring and gap analysis in the results (default true).
• Compliance Level — Select the compliance level to analyze: Level 1 (Basic), Level 2 (Intermediate), or Level 3 (Advanced). Defaults to Level 2.
• Limit — Limit the number of benchmark results returned. Defaults to 100.

Output shape

a list of benchmark records with added compliance analysis details

Each returned benchmark record includes compliance analysis details such as overall compliance score, gap analysis, compliance status, remediation priority, and mappings to framework controls. Analysis respects the specified compliance frameworks, level, and scoring inclusion option.

Examples

Example 1: Analyze security benchmarks for compliance against NIST and ISO 27001 frameworks at an intermediate level including compliance scoring.

Set Compliance Frameworks to ['NIST','ISO27001'], Compliance Level to 'level2', and Include Compliance Scoring to true.