Compliance_Essentials

Lookups and Collections

Compliance Essentials 3.0.1 stores most operational state in app-managed KV store collections and lookup-backed data.

Users should manage records through the app UI where possible.

Core Setup

Data	Purpose	Managed From
Framework configuration	Tracks enabled frameworks	Framework Setup
Framework profiles	Defines supported baselines/profiles	Frameworks & Catalogs
Controls catalog	Stores framework controls	App Setup / shipped data
Control objectives	Stores assessment objectives and methods	App Setup / shipped data
Control guidance	Stores editable guidance	Control Detail
Control display settings	Controls CIA/CCI display behavior	Settings

System Boundary Data

Data	Purpose	Managed From
System boundaries	Defines scoped systems	System Boundaries
System boundary framework scope	Links boundaries to framework/profile scope	System Boundaries
System boundary control applicability	Links boundaries to controls/control sets	System Boundary Detail
System boundary permissions	Controls boundary admin access	System Boundary Detail
System assets	Stores app-managed assets	Asset Inventory, System Boundary Detail
FIPS 199 categorization	Stores CIA categorization by boundary	System Boundary Detail

Monitoring Data

Data	Purpose	Managed From
Search definitions	Defines monitoring searches	Saved Search Inventory
Search control mappings	Links searches to controls	Saved Search Inventory, App Setup
Search schedules	Stores cadence, cron, and lookback	Saved Search Inventory
Search thresholds	Stores alert thresholds	Saved Search Inventory
Search result mappings	Maps result fields to assets, identities, and sources	Saved Search Inventory
Evidence run results	Stores scheduled search output	idx_compliance_results

Assessment and Remediation Data

Data	Purpose	Managed From
Assessments	Assessment metadata and workflow state	Assessment Overview
Assessment controls	Controls in assessment scope	Assessment Detail
Assessment objectives	Objective-level assessment status	Assessment Detail
Assessment attachments	Links objectives/assessments to artifacts	Assessment Detail
Artifacts	Supporting evidence/artifact records	Artifacts & Evidence
Control gaps	Gap and remediation records	Control Gaps
POA&M items	Plan of action and milestones	POA&M
Audit logs	App activity history	Audit & Activity Log

Baseline Data

Data	Purpose	Managed From
Baseline configurations	Approved or pending configuration records	Baseline Management
Baseline groups	Asset groups for baseline assignment	Baseline Management
Software allowlist	Approved software records	Baseline Management
Configuration exceptions	Approved exceptions	Baseline Management
Change records	Authorized change records	Baseline Management