Compliance OS

Vendor Workspace

Demo ModeSample Data Only

This is a Demo Compliance Environment

No real customer data is stored here. All organizations, evidence, assessments, and control updates are seeded sample/demo data for product demonstrations.

Active demo organization: King's Healthcare, Inc. (Demo Organization)

Vendor self-assessment workspace

Racheal

MediTech HIPAA + NIST 800-171 Audit

Status: IN PROGRESSCustomer: Ball State UniversityEngagement: Ball State Vendor Risk ProgramDue: Apr 13, 20261 framework
Control LibraryEvidence CenterOpen Audit Review
Assigned Assessments
Switch between vendor audits and framework-specific questionnaires.
King's Compliance Advisory (Demo) HIPAA Audit 2026-07-30MediTech HIPAA + NIST 800-171 AuditMediTech HIPAA + NIST 800-171 AuditKing's FinTech, Inc. Assurance Readiness SprintKing's FinTech, Inc. Control Validation ReviewKing's FinTech, Inc. Annual Security Compliance Audit 2026
Total Controls
6

1 framework scope

Applied Controls
6

5 fully implemented

Tasks (Open)
1

0 overdue POA&M items

Evidence Linked
0

0 awaiting customer review

High-Risk Gaps
0

0 needs info/rejected

Control Completion
Answered controls vs total in scope
6 / 6
100% complete
Submission Readiness
Combines completion, evidence, and open high-risk gaps
55%
55% complete
Risk Assessment Score
Higher is better (lower open-risk exposure)
96
96% complete
Control Status Breakdown
Implementation state distribution across this audit scope.
Controls
7
Implemented
5
71%
Partial
1
14%
Open
1
14%
Request Queue Breakdown
What is blocking submission or requires follow-up.
No chart data available yet.
Domain Completion
Answered controls by domain (top incomplete domains surface first).
Framework Scope
Frameworks currently included in this vendor assessment.

HIPAA Security Rule

HIPAA · 45 CFR 164

6 controls
100%
Domain Progress
Accordion view for control domains, completion, evidence, and top gaps.

Administrative Safeguards

2 / 2 controls answered

100%
1 implemented0 open

Implementation Coverage

50%

Includes fully implemented controls only

Evidence Coverage

0%

Controls with at least one linked evidence item

High Risk Gaps

0

Open controls marked High/Critical

Top Gaps

164.308(a)(1)(ii)(A) Risk Analysis

PARTIALLY IMPLEMENTED—

Physical Safeguards

1 / 1 controls answered

100%
1 implemented0 open

Implementation Coverage

100%

Includes fully implemented controls only

Evidence Coverage

0%

Controls with at least one linked evidence item

High Risk Gaps

0

Open controls marked High/Critical

Top Gaps

No open gaps in this domain.

Policies & Procedures

1 / 1 controls answered

100%
1 implemented0 open

Implementation Coverage

100%

Includes fully implemented controls only

Evidence Coverage

0%

Controls with at least one linked evidence item

High Risk Gaps

0

Open controls marked High/Critical

Top Gaps

No open gaps in this domain.

Technical Safeguards

2 / 2 controls answered

100%
2 implemented0 open

Implementation Coverage

100%

Includes fully implemented controls only

Evidence Coverage

0%

Controls with at least one linked evidence item

High Risk Gaps

0

Open controls marked High/Critical

Top Gaps

No open gaps in this domain.

Customer Requests / POA&M
Controls needing remediation action, evidence, or reviewer follow-up.

164.308(a)(1)(ii)(A) Risk Analysis

—
PARTIALLY IMPLEMENTEDDRAFTevidence neededowner unassigned199d overdue

164.308(a)(5)(ii)(C) Log-in Monitoring

—
IMPLEMENTEDDRAFTevidence neededowner unassigned199d overdue

164.310(d)(1) Device and Media Controls

—
IMPLEMENTEDDRAFTevidence neededowner unassigned199d overdue

164.316(b)(1) Documentation Retention

—
IMPLEMENTEDDRAFTevidence neededowner unassigned199d overdue

164.312(a)(1) Access Control

—
IMPLEMENTEDDRAFTevidence neededowner unassigned199d overdue

164.312(b) Audit Controls

—
IMPLEMENTEDDRAFTevidence neededowner unassigned199d overdue
Control Workbench
Vendor-ready questionnaire table for implementation status, risk, owners, and evidence.
ControlDomainFrameworkStatusCustomer ReviewEvidence ReviewRiskEvidencePOA&MOwnerDue

164.308(a)(1)(ii)(A) Risk Analysis

Administrative SafeguardsHIPAAPARTIALLY IMPLEMENTEDDRAFT——
Missing
—
—
Apr 13, 2026
199d overdue

164.308(a)(5)(ii)(C) Log-in Monitoring

Administrative SafeguardsHIPAAIMPLEMENTEDDRAFT——
Missing
—
—
Apr 13, 2026
199d overdue

164.310(d)(1) Device and Media Controls

Physical SafeguardsHIPAAIMPLEMENTEDDRAFT——
Missing
—
—
Apr 13, 2026
199d overdue

164.316(b)(1) Documentation Retention

Policies & ProceduresHIPAAIMPLEMENTEDDRAFT——
Missing
—
—
Apr 13, 2026
199d overdue

164.312(a)(1) Access Control

Technical SafeguardsHIPAAIMPLEMENTEDDRAFT——
Missing
—
—
Apr 13, 2026
199d overdue

164.312(b) Audit Controls

Technical SafeguardsHIPAAIMPLEMENTEDDRAFT——
Missing
—
—
Apr 13, 2026
199d overdue
This vendor workspace is designed for customer-facing audits and self-assessments. It supports framework-scoped progress tracking, evidence collection, and POA&M-style remediation queues for HIPAA, NIST CSF, SOC 2, ISO 27001, CIS Controls, and the added NIST 800-171 / 800-172 / 800-53 frameworks.