Standard compliance

Last updated: Oct 26, 2026

---

The platform shows how well your organization and each group comply with different international cybersecurity standards that Fluid Attacks validates. You can find this information in Compliance. Compliance has two sections:

• Overview: Gives a high-level summary of your general compliance posture and compares it with other organizations.
• Unfulfilled: Shows the unfulfilled standards of each group in detail. You can also generate detailed reports about the gaps that your team must close.

All the sections of Compliance show a header with this information:

• % Compliance of [organization]: The percentage of security requirements in the standards that your organization fulfills
• ET to full compliance: An estimate of the number of days to correct all noncompliance problems and get a 100% compliance level
• Standard least complied with: The name of the standard with the lowest compliance in your organization
• Lowest % compliance: The percentage of fulfilled requirements of the standard with the lowest compliance

See an overview of your compliance

On the Fluid Attacks platform, you can compare your performance with other organizations. In the Overview section of Compliance, you see how your organization compares with the best, worst, and average compliance levels for each of the standards validated by Fluid Attacks.

Check unfulfilled standards in your groups

In the Unfulfilled section of Compliance, you can examine the groups of your organization and their compliance with each standard.

To examine the compliance of your groups in detail, follow these steps:

1. Use the dropdown menu next to the title Unfulfilled standards (#) in group to select the group that you want to analyze. The list shows only the groups that you have access to.

   

2. After you select a group, you see the standards that the group does not fully comply with at this time. You also see the number of security requirements that your team did not apply.

   

   Click the dropdown menu of the standard to see the names of the unfulfilled requirements.

   

Download reports of requirements needed to reach compliance

In the Unfulfilled section, you can download full reports about the noncompliance areas of a group. Follow these steps:

1. In the Unfulfilled section of Compliance, select the group that you want a report for.

   

2. Click the Generate report button on the right.

   

3. In the pop-up window, select a PDF or CSV file. Use PDF if you want the links to the security requirements in the report. Use CSV if you want to filter the report (for example, by requirements). Then, use the toggle in the Action column to select the standards to include.

   

   You can use the Exclude all/Include all toggle to select the desired items more quickly.

4. The platform tells you that the report is ready, and your browser downloads it. The file is also available in Downloads for seven days.

The downloaded report gives an overview of the group with the standards that you selected. The PDF version shows these items:

• A short description of the standard(s) that the group does not comply with
• The name(s) of the associated requirement(s) that your team must fulfill to comply, with links to the related documentation
• The name(s) of the types of vulnerabilities related to the requirement(s), with links to the vulnerability URL(s) in the platform

The CSV version shows these items:

• The name(s) of the standard(s)
• The vulnerability URL(s)
• The name(s) of the types of vulnerabilities
• The three-number code(s) of the related requirement(s)