Design preview Synthetic data. Role and organisation selectors demonstrate layouts; they do not grant authenticated access.

Workspace / Overview

Payment services · 2026 assessment

Northwind Payments Ltd

One control library. A clearer view of what needs attention.

Explore controls
Scope Payment platform · CDESample catalogue DEMO-01Assessment Draft preview

Framework readiness

Illustrative control-level indicators
PCI DSS
67%
Readiness preview9 / 9 controls assessed0 not assessed
Not a compliance conclusion
ISO 27001
73%
Readiness preview9 / 10 controls assessed1 not assessed
Not a compliance conclusion
NIST CSF
58%
Readiness preview9 / 10 controls assessed1 not assessed
Not a compliance conclusion
DORA
53%
Readiness preview9 / 10 controls assessed1 not assessed
Not a compliance conclusion
How this readiness preview works

This illustrative control-level indicator uses implemented 100%, partial 50%, in progress 25%, and not implemented or not assessed 0%. Unassessed controls stay in the denominator; not applicable controls are excluded. It is not the production requirement-scoring engine or a compliance conclusion. Mapping, scope and scoring rules require QSA acceptance.

YOUR NEXT ACTIONS

Needs attention

6
View all findings

ASSESSMENT COVERAGE

Control status

12 controls
Implemented
6
Partial
2
In progress
1
Not implemented
2
Not assessed
1
Not applicable
0
11 of 12applicable controls assessed. Unknown work remains visible in readiness.

COVERAGE AT A GLANCE

Control domains & frameworks

Explore mappings
Control domainPCI DSSISO 27001NIST CSFDORAAssessed
Governance1 links2 links2 links2 links2 / 2
Risk and assets2 links2 links1 links1 links2 / 2
Third parties and people1 links1 links2 links2 links2 / 2
Identity and access2 links2 links2 links1 links2 / 2
Infrastructure protection1 links1 links0 links1 links1 / 1
Data protection1 links0 links1 links1 links1 / 1
Testing and assurance0 links1 links1 links1 links0 / 1
Incident and resilience1 links1 links1 links1 links1 / 1

Sample links show relationships, not validated requirement satisfaction.

Sentinel GRC / Locked StackDevelopment preview · synthetic data · no compliance assurance