Dashboards

What these dashboards are for

The dashboards complement the technical deliverable (action_plan.html) by providing:

  • Executive visibility (KPIs and posture summaries)

  • Risk and governance views (risk register, tiers, treatment guidance)

  • Exposure lenses (attack surface, TLS/ports, hotspots)

  • Modernization drivers (lifecycle / obsolescence)

  • Compliance lenses (PCI and framework crosswalk suggestions)

  • Time series tracking (historical trends across scans)

  • Scenario-based narratives (probable attack paths, MITRE mapping, ransomware susceptibility)

All dashboards are designed to be offline-friendly (no CDN required) and to remain auditable:

  • Deterministic core logic is always preferred for scoring/metrics.

  • Optional LLM blocks (when enabled) are constrained (JSON-only guardrails) and must not be interpreted as proof of exploitation, internet exposure, or control presence.

Last updated