Overview
The Framework Coverage Explorer is a powerful visual tool designed to bridge the gap between regulatory requirements and technical evidence. It allows your organization to map internal monitoring capabilities (Dashboards and KPIs) directly to industry-standard compliance frameworks like NIST CSF, PCI-DSS, DORA and CIS Controls.
With this explorer, compliance leads and auditors can:
- Visualize Coverage: Instantly see which regulatory controls are actively monitored (supporting evidence) and which are "blind spots."
- Navigate Frameworks: Explore the complex hierarchy of categories and subcategories within major frameworks.
- Access Evidence: Jump directly from a framework requirement to the live dashboard providing the evidence.
- Drive Remediation: Identify coverage gaps to prioritize the creation of new monitoring dashboards.
Feature walkthrough video
Watch the Framework Coverage Explorer end to end — browse a framework, expand its controls to see live monitoring coverage, open a control’s KPI evidence, and retarget the KPI from the picker. A “Monitored” control indicates live evidence signals — not a compliance attestation — and coverage may be partial.
Getting Started
To access the Framework Coverage Explorer, navigate to Dashboards > Knowledge Base > Framework Coverage in the sidebar.
Framework Navigation
The platform supports multiple industry frameworks, each organized by its native hierarchy.
Frameworks panel: In the left-hand Frameworks panel, select a framework card to switch between the active frameworks (e.g., CIS Critical Security Controls 8.1, Digital Operational Resilience Act RTS 2024/1532, NIST Cybersecurity Framework 2.0, Payment Card Industry Data Security Standard 4.0.1).
Metadata: Each framework card displays the framework name and its specific version, ensuring you are documenting against the correct regulatory standard.
Controls & Monitoring Coverage
The left panel displays the Control Tree, representing the full structure of the selected framework.
Exploring the Hierarchy:
Nested Categories: Click the chevron icons to expand/collapse categories (e.g., CIS "Control 1 - Inventory and Control of Enterprise Assets" -> safeguard 1.1, or NIST "Identify" -> "Risk Assessment").
Search & Filter: Use the search bar to find specific control IDs (like
PR.AT-01) or keywords (likevulnerability).Show only controls with monitoring coverage: Toggle this checkbox to hide any controls that do not currently have a mapped dashboard. This is the fastest way to see your "active" compliance footprint.
Understanding Coverage Signals:
Highlighting: Controls that are actively monitored are visually distinguished.
Coverage Metadata: The interface indicates whether a control is supported by automated signals or requires manual external processes.
Dashboard Evidence Panel
When you select a control in the tree, the Dashboard Panel on the right populates with the associated evidence.
Mapped KPIs: Displays a card for each KPI, from your entitled dashboards, that provides evidence for the selected control.
KPI Previews: See a real-time snapshot of the primary KPI status (e.g., "Vulnerability Compliance: 94%") directly within the panel.
One-Click Jump: Select View Dashboard to open the full interactive Tableau dashboard for deep-dive analysis, or View Full Documentation to open the control's documentation.
Quick Facts and Communications & Escalation: Shows the control owner and contact, plus escalation details such as the Teams channel, email distribution list, and office hours.
Map a dashboard: If no dashboard is mapped to a control yet, users with tenant configuration management rights can select Map a dashboard to choose a dashboard and KPI for it.
Controls with a Monitored pill have at least one entitled dashboard that supports that control.
Auditor Readiness & Gap Analysis
This explorer is specifically designed to facilitate conversations with auditors.
For Internal Audits:
Gap Identification: By unchecking "Show only controls with monitoring coverage," you can identify regulatory requirements that currently lack automated evidence. These represent your "Compliance Gaps."
Readiness Reviews: Use the explorer to walk through each framework category with control owners to ensure the mapped dashboards accurately represent the control's intent.
During External Audits:
Evidence Mapping: Instead of searching for spreadsheets, use the explorer to show auditors exactly how a requirement (e.g., PCI Requirement 11.3) is satisfied by a specific, live monitoring signal.
Transparency: The direct link between framework requirements and technical data sources provides high-integrity supporting evidence of "Compliance by Design."
Integration with the Knowledge Base
The Framework Explorer works in tandem with the Control Knowledge Base. While the Knowledge Base provides the narrative (Who owns it? What is the policy?), the Framework Explorer provides the structural mapping (How does this satisfy NIST?).
Customizing Control-to-KPI Mappings
DataBee ships curated mappings between framework controls and the dashboards that evidence them. With the appropriate permissions, you can tailor a control's mapping to your organization's own interpretation — selecting the specific metric (KPI) on a dashboard that best demonstrates coverage of that control, rather than pointing an auditor at an entire dashboard. Customizations are tenant-local and are preserved across DataBee framework content updates.
Editing mappings requires tenant configuration management rights. Without them, the mappings are read-only.
Editing a control's KPI
Expand a control and select a safeguard. The evidence panel on the right shows the currently mapped KPI card with its live value.
Click the edit (pencil) icon on the KPI card to open the Customize KPI dialog.
Choose a Dashboard from your entitled dashboards, then select a KPI from the curated list. Each option is described in plain, auditor-friendly business terms.
Optionally enter a custom Card label, then click Save. The new value appears on the card immediately.
Identifying customized controls
A control whose mapping you have changed displays a Customized badge, so you can tell at a glance which controls use your own mapping versus the DataBee default.
Resetting to the DataBee default
To revert a control, select the Reset to DataBee default icon (the circular arrow next to the pencil) on the KPI card, or open the Customize KPI dialog and select Reset. The control returns to the DataBee-shipped mapping and the Customized badge is removed.
Manage Frameworks Coverage
Frameworks Coverage Management allows administrators to control which compliance framework versions are visible in the Framework Coverage feature. This helps organizations display only the frameworks that are relevant to their compliance and audit requirements while supporting multiple framework versions during transition periods.
Navigate to the configuration icon at the top right corner and select Access Management. From the left side bar select Frameworks Coverage. The page displays a summary view of all framework families along with their currently enabled versions.
Administrators can select a framework family, such as PCI DSS, NIST CSF, DORA or CIS Controls, from the Select Framework drop down. You can enable or disable individual versions using simple toggle controls.
