--- title: "Framework Coverage" slug: "framework-coverage" updated: 2026-11-02T07:13:39Z published: 2026-11-02T07:13:39Z canonical: "docs.databee.buzz/framework-coverage" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # Framework Coverage ## Overview The **Framework Coverage Explorer** is a powerful visual tool designed to bridge the gap between regulatory requirements and technical evidence. It allows your organization to map internal monitoring capabilities (Dashboards and KPIs) directly to industry-standard compliance frameworks like **NIST CSF**, **PCI-DSS**, **DORA** and **CIS Controls**. With this explorer, compliance leads and auditors can: - **Visualize Coverage**: Instantly see which regulatory controls are actively monitored (supporting evidence) and which are "blind spots." - **Navigate Frameworks**: Explore the complex hierarchy of categories and subcategories within major frameworks. - **Access Evidence**: Jump directly from a framework requirement to the live dashboard providing the evidence. - **Drive Remediation**: Identify coverage gaps to prioritize the creation of new monitoring dashboards. --- ## Feature walkthrough video Watch the Framework Coverage Explorer end to end — browse a framework, expand its controls to see live monitoring coverage, open a control’s KPI evidence, and retarget the KPI from the picker. *A “Monitored” control indicates live evidence signals — not a compliance attestation — and coverage may be partial.* [Video](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databee_framework_coverage_launch.mp4?sv=2026-02-06&spr=https&st=2026-11-03T11%3A35%3A31Z&se=2026-11-03T12%3A35%3A31Z&sr=c&sp=r&sig=LwgFBiLiuRBmF1UU2cMoXdlg%2Br4ATdea%2BHe4wNDGiwU%3D) ## Getting Started To access the Framework Coverage Explorer, navigate to **Dashboards** > **Knowledge Base** > **Framework Coverage** in the sidebar. --- ## Framework Navigation The platform supports multiple industry frameworks, each organized by its native hierarchy. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/framework_coverage.png?sv=2026-02-06&spr=https&st=2026-11-03T11%3A35%3A31Z&se=2026-11-03T12%3A35%3A31Z&sr=c&sp=r&sig=LwgFBiLiuRBmF1UU2cMoXdlg%2Br4ATdea%2BHe4wNDGiwU%3D) - **Frameworks panel**: In the left-hand **Frameworks** panel, select a framework card to switch between the active frameworks (e.g., **CIS Critical Security Controls 8.1**, **Digital Operational Resilience Act RTS 2024/1532**, **NIST Cybersecurity Framework 2.0**, **Payment Card Industry Data Security Standard 4.0.1**). - **Metadata**: Each framework card displays the framework name and its specific version, ensuring you are documenting against the correct regulatory standard. --- ## Controls & Monitoring Coverage The left panel displays the **Control Tree**, representing the full structure of the selected framework. ### Exploring the Hierarchy: - **Nested Categories**: Click the chevron icons to expand/collapse categories (e.g., CIS "Control 1 - Inventory and Control of Enterprise Assets" -> safeguard 1.1, or NIST "Identify" -> "Risk Assessment"). - **Search & Filter**: Use the search bar to find specific control IDs (like `PR.AT-01`) or keywords (like `vulnerability`). - **Show only controls with monitoring coverage**: Toggle this checkbox to hide any controls that do not currently have a mapped dashboard. This is the fastest way to see your "active" compliance footprint. ### Understanding Coverage Signals: - **Highlighting**: Controls that are actively monitored are visually distinguished. - **Coverage Metadata**: The interface indicates whether a control is supported by automated signals or requires manual external processes. --- ## Dashboard Evidence Panel When you select a control in the tree, the **Dashboard Panel** on the right populates with the associated evidence. - **Mapped KPIs**: Displays a card for each KPI, from your entitled dashboards, that provides evidence for the selected control. - **KPI Previews**: See a real-time snapshot of the primary KPI status (e.g., "Vulnerability Compliance: 94%") directly within the panel. - **One-Click Jump**: Select **View Dashboard** to open the full interactive Tableau dashboard for deep-dive analysis, or **View Full Documentation** to open the control's documentation. - **Quick Facts and Communications & Escalation**: Shows the control owner and contact, plus escalation details such as the Teams channel, email distribution list, and office hours. - **Map a dashboard**: If no dashboard is mapped to a control yet, users with tenant configuration management rights can select **Map a dashboard** to choose a dashboard and KPI for it. Controls with a **Monitored** pill have at least one entitled dashboard that supports that control. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/framework_coverage_2.png?sv=2026-02-06&spr=https&st=2026-11-03T11%3A35%3A31Z&se=2026-11-03T12%3A35%3A31Z&sr=c&sp=r&sig=LwgFBiLiuRBmF1UU2cMoXdlg%2Br4ATdea%2BHe4wNDGiwU%3D) --- ## Auditor Readiness & Gap Analysis This explorer is specifically designed to facilitate conversations with auditors. ### For Internal Audits: - **Gap Identification**: By unchecking "Show only controls with monitoring coverage," you can identify regulatory requirements that currently lack automated evidence. These represent your "Compliance Gaps." - **Readiness Reviews**: Use the explorer to walk through each framework category with control owners to ensure the mapped dashboards accurately represent the control's intent. ### During External Audits: - **Evidence Mapping**: Instead of searching for spreadsheets, use the explorer to show auditors exactly how a requirement (e.g., PCI Requirement 11.3) is satisfied by a specific, live monitoring signal. - **Transparency**: The direct link between framework requirements and technical data sources provides high-integrity supporting evidence of "Compliance by Design." --- ## Integration with the Knowledge Base The Framework Explorer works in tandem with the **Control Knowledge Base**. While the **Knowledge Base** provides the *narrative* (Who owns it? What is the policy?), the **Framework Explorer** provides the *structural mapping* (How does this satisfy NIST?). ## Customizing Control-to-KPI Mappings DataBee ships curated mappings between framework controls and the dashboards that evidence them. With the appropriate permissions, you can tailor a control's mapping to your organization's own interpretation — selecting the specific **metric (KPI)** on a dashboard that best demonstrates coverage of that control, rather than pointing an auditor at an entire dashboard. Customizations are tenant-local and are preserved across DataBee framework content updates. Editing mappings requires tenant configuration management rights. Without them, the mappings are read-only. ### Editing a control's KPI 1. Expand a control and select a safeguard. The evidence panel on the right shows the currently mapped **KPI card** with its live value. 2. Click the **edit (pencil)** icon on the KPI card to open the **Customize KPI** dialog. 3. Choose a **Dashboard** from your entitled dashboards, then select a **KPI** from the curated list. Each option is described in plain, auditor-friendly business terms. 4. Optionally enter a custom **Card label**, then click **Save**. The new value appears on the card immediately. ![Customize KPI dialog showing the dashboard selector and the curated KPI list](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/image-1793279445956.png?sv=2026-02-06&spr=https&st=2026-11-03T11%3A35%3A31Z&se=2026-11-03T12%3A35%3A31Z&sr=c&sp=r&sig=LwgFBiLiuRBmF1UU2cMoXdlg%2Br4ATdea%2BHe4wNDGiwU%3D) ### Identifying customized controls A control whose mapping you have changed displays a **Customized** badge, so you can tell at a glance which controls use your own mapping versus the DataBee default. ![KPI card for a customized control showing the live value, Customized indicator, and Reset to DataBee default link](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/image-1793279581021.png?sv=2026-02-06&spr=https&st=2026-11-03T11%3A35%3A31Z&se=2026-11-03T12%3A35%3A31Z&sr=c&sp=r&sig=LwgFBiLiuRBmF1UU2cMoXdlg%2Br4ATdea%2BHe4wNDGiwU%3D) ### Resetting to the DataBee default To revert a control, select the **Reset to DataBee default** icon (the circular arrow next to the pencil) on the KPI card, or open the Customize KPI dialog and select **Reset**. The control returns to the DataBee-shipped mapping and the Customized badge is removed. ## Manage Frameworks Coverage Frameworks Coverage Management allows administrators to control which compliance framework versions are visible in the Framework Coverage feature. This helps organizations display only the frameworks that are relevant to their compliance and audit requirements while supporting multiple framework versions during transition periods. Navigate to the **configuration icon** at the top right corner and select **Access Management**. From the left side bar select **Frameworks Coverage**. The page displays a summary view of all framework families along with their currently enabled versions. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/access_management_framework_coverage.png?sv=2026-02-06&spr=https&st=2026-11-03T11%3A35%3A31Z&se=2026-11-03T12%3A35%3A31Z&sr=c&sp=r&sig=LwgFBiLiuRBmF1UU2cMoXdlg%2Br4ATdea%2BHe4wNDGiwU%3D) Administrators can select a framework family, such as PCI DSS, NIST CSF, DORA or CIS Controls, from the **Select Framework** drop down. You can enable or disable individual versions using simple toggle controls. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/framework_coverage_toggle.png?sv=2026-02-06&spr=https&st=2026-11-03T11%3A35%3A31Z&se=2026-11-03T12%3A35%3A31Z&sr=c&sp=r&sig=LwgFBiLiuRBmF1UU2cMoXdlg%2Br4ATdea%2BHe4wNDGiwU%3D)