Compliance Assessments

Track your organization's compliance posture against industry frameworks and regulations.

Overview

Compliance assessments in Pestle allow you to:

• Evaluate controls against framework requirements
• Track compliance status over time
• Generate audit-ready reports
• Assign ownership and due dates

Supported Frameworks

Pestle includes 70+ compliance frameworks out of the box:

Creating an Assessment

1. Navigate to Compliance → Assessments
2. Click New Assessment
3. Select the framework(s) to assess against
4. Choose the scope (entire organization or specific domains)
5. Set the assessment period and due date
6. Assign a lead assessor

Assessment Workflow

1. Control Evaluation

For each control requirement, assessors can:

• Set compliance status: Compliant, Partially Compliant, Non-Compliant, or Not Applicable
• Add observations and findings
• Attach evidence documents
• Link to applied controls

2. Evidence Collection

Support compliance claims with evidence:

• Upload documents (policies, procedures, screenshots)
• Link to external systems
• Reference existing controls
• Add auditor notes

3. Gap Analysis

Identify and track compliance gaps:

• Automatic gap detection based on control status
• Risk rating for each gap
• Remediation planning with due dates
• Progress tracking

Reporting

Generate comprehensive compliance reports:

• Executive Summary - High-level compliance posture
• Detailed Assessment Report - Control-by-control status
• Gap Report - Outstanding compliance gaps
• Evidence Package - Audit-ready documentation

Continuous Compliance

Move from point-in-time to continuous compliance:

• Automated evidence collection via integrations
• Real-time compliance dashboards
• Alert notifications for control failures
• Trend analysis and reporting

Best Practices

1. Start with high-risk areas - Prioritize critical controls
2. Assign clear ownership - Each control should have an owner
3. Collect evidence as you go - Don't wait until audit time
4. Review regularly - Schedule periodic assessment reviews
5. Link controls to risks - Understand the "why" behind each control