Compliance Overview
HarborGuard treats compliance as a continuous, query-driven activity rather than a once-a-year point-in-time exercise. Every scan, triage action, attestation, and policy change is recorded as queryable evidence, and each control is re-evaluated against that evidence on demand.
Approach
| Concern | HarborGuard's model |
|---|---|
| Evidence collection | Automatic. Scan telemetry, audit logs, RBAC snapshots, and SBOMs are captured continuously. |
| Control evaluation | On-demand. Each control's pass/warn/fail status is computed from the live data when a report is generated. |
| Point-in-time export | Generated reports are immutable artifacts pinned to a reporting period and retained per reportRetentionDays. |
| Audit trail | Every policy edit, role change, attestation action, and report export emits an audit event. |
Supported frameworks
The following framework IDs are accepted by the compliance policy and the report builder:
| ID | Framework |
|---|---|
SOC2 | SOC 2 Type II (2017 / 2022 revision) |
PCI_DSS | PCI DSS |
NIST_800_190 | NIST SP 800-190 — Application Container Security Guide |
NIST_800_53 | NIST SP 800-53 Rev. 5 |
NIST_800_171 | NIST SP 800-171 Rev. 3 |
ISO_27001 | ISO/IEC 27001:2022 |
HIPAA | HIPAA Security Rule |
CMMC | CMMC Level 2 |
CIS_DOCKER | CIS Docker Benchmark |
FEDRAMP | FedRAMP Moderate |
CUSTOM | Org-defined custom framework |
Multiple frameworks can be active simultaneously — set compliancePolicy.activeFramework to an array of any of the above.
What's in this section
Posture
Live compliance KPIs for coverage, MTTR, SLA, and risk score.
Compliance packs
Framework-bundled evidence reports and per-control grading rules.
Report builder
Assembling custom reports from the section catalog on demand.
Scheduling
Recurring report generation and automated delivery to channels.
See also
- Posture Dashboard — live framework scoring
- Compliance Packs — bundled controls per framework
- Report Builder — evidence pack generation
- Vulnerabilities: SLA Policy — primary input to compliance grades