What a compliance view provides
Nova organizes available cloud security evidence against supported control expectations and frameworks. It helps teams see which controls were assessed, which resources contributed evidence, where gaps remain, and which remediation or exception work is active.
The view supports preparation, monitoring, and evidence review. It does not certify the organization, replace an auditor, interpret every contractual obligation, or prove that unassessed controls are effective.
Review control status responsibly
- Confirm the framework, control version, customer scope, and assessment time.
- Read the supporting evidence and affected resources rather than relying on the status alone.
- Separate passing, failing, not assessed, not applicable, incomplete, and unavailable states.
- Review approved exceptions, compensating controls, owners, expiry, and verification evidence.
- Use the organization’s governance and assurance process for the final compliance conclusion.
Prepare for evidence review
Agree the intended framework, cloud scope, evidence period, owners, exception process, and external assurance needs before relying on a summary. Exported or retained reports should preserve the scope and evidence time used for the decision.