Skip to main content
The Compliance tab on a Risk Assessment tracks the client against the CIS Critical Security Controls (153 safeguards). There is no questionnaire to fill in: Telivy maps what the scan found onto the CIS safeguards, so each answer comes from endpoint and cloud evidence.

What the tab shows

The tab lists the CIS controls, each with a compliance status and severity, and shows the client’s overall CIS posture. Use the category filter to look at one CIS control group. A category’s status is worked out from the controls inside it.

Requirements

Compliance is available on any Risk Assessment. Live CIS data comes through the Tentacle integration, which needs a linked Unity customer with an active Tentacle subscription. Until that is set up, the tab shows a setup prompt instead of controls. The Tentacle guide has the setup steps.

FAQ

Only the CIS Critical Security Controls.
Live CIS data needs the Tentacle integration: a linked Unity customer with an active subscription and access granted. Follow the Tentacle guide and the controls appear.
Yes. Safeguard answers are mapped from scan findings, so they follow the latest scan.