The posture dashboard
The landing page is your operational picture. It rolls up four questions:
- Where are we exposed? - risks above appetite, overdue controls.
- What is happening now? - open incidents, active alerts.
- Are we compliant? - control coverage by framework.
- How are we trending? - the composite score over time.
The composite score (0-100)
A single number summarising cyber resilience across 12 weighted domains (governance, identity,
vulnerability, detection, response, recovery, third-party, privacy, resilience and more).
Higher is better.
| Band | Meaning |
| 90-100 | Leading - peer-leading maturity |
| 75-89 | Strong - minor gaps |
| 60-74 | Developing - material gaps exist |
| < 60 | At risk - escalation required |
The composite is a management signal, not a certification. Drill into the domains that moved.
Navigation map
- Overview - composite score, KPI tiles, trend sparkline.
- Risks - the risk register; filter by owner, appetite breach, review date.
- Incidents - open + historical; filter by severity and status.
- Controls - the control library and their assessed state.
- Compliance - framework coverage (NCA ECC, ISO 27001, NIST CSF, SOC 2, PCI-DSS).
- Assets - inventory of systems and data.
- Reports - scheduled and ad-hoc exports.
Drilling down
Click any tile to open the underlying list. Every table supports search, sort, and CSV export.
Use the breadcrumb to step back. Deep links are shareable within your tenant - but never post
screenshots containing personal data outside approved channels.
⚠️ Data minimisation: dashboards redact personal data by default. Do not attempt to re-identify
individuals unless you have a lawful basis and approval.