Compliance Report

The Compliance Report in Site24x7's network configuration management (NCM) module helps you evaluate how well your network devices adhere to security and operational policies. It highlights policy violations, device-level compliance, and rule-level checks, enabling admins to take corrective actions and maintain regulatory or organizational compliance.

Use cases

Identify devices or configurations violating compliance policies.
Monitor compliance at the policy, device, and rule levels.
Prioritize remediation by focusing on major or critical rule violations.
Generate compliance records for audits and regulatory reporting.
Track compliance progress over time with scheduled reports.

Generating the report

Log in to your Site24x7 account.
Navigate to Reports > NCM Device > Compliance Report.
Select the desired report: Policy Violations Report, Device Compliance Report, or Rule Compliance Report. You can also toggle between these views from within any report.
Sort in ascending or descending order across all sections based on column headers.
Use the Expand View check box in the top-right of the page for a detailed dashboard view.
Click Share This to export the report as a CSV or PDF, email the report, or schedule it at regular intervals.

Report sections

The Compliance Report is divided into three sections—Policy Violations Report, Device Compliance Report, and Rule Compliance Report—each focusing on a different layer of compliance monitoring.

Policy Violations Report
This report shows compliance with preconfigured and custom policies.
- Policies: Shows the total number of policies, grouped as Compliant, Non-Compliant, or Not Available.
- Devices: Displays how many devices are compliant or non-compliant against policies.
- Rules: Categorized as Major, Critical, Warning, or Compliant.
- Table View:
  - Columns: Name, Compliance Score, Associated Devices, Associated Devices Status, and Associate. Click Associate to associate more devices to the policy.
  - Expand rows to drill down into specific rule violations.
Device Compliance Report
This report displays compliance status per device.
- Categorization: Non-Compliant, Compliant, and Not Available.
- Provides details such as:
  - Monitor Name, Compliance Score, Associated Policies, Associated Policy Status, and Associate. Click Associate to associate more policies to the device.
  - Expand to view the policies associated with each device.
- This report is useful for isolating devices that repeatedly fail compliance checks.
Rule Compliance Report
This report shows compliance with individual rules across all devices.
- Key details include:
  - Name, Description, Associated Policies, and Rules Status.
- Helps admins pinpoint which rules contribute most to non-compliance.
- Expand each rule to view the devices that have a policy with this rule associated.

Comparison of compliance reports

Report type	Categorization	Key insights	Use case
Policy Violations Report	Policies: Non-Compliant, Compliant, Not Available Devices: Non-Compliant, Compliant, Not Available Rules: Major, Critical, Warning, Compliant	Compliance score per policy, device associations, and violated rules	Get a high-level overview of overall policy adherence.
Device Compliance Report	Devices: Non-Compliant, Compliant, Not Available	Device-level compliance, associated policies, and last checked status	Identify non-compliant devices for remediation.
Rule Compliance Report	Rules: Major, Critical, Warning, Compliant	Severity of rule violations, violated devices, and associated policies	Pinpoint specific rules causing compliance failures.

Best practices

Focus on high-severity rule violations first (Critical or Major).
Group devices by vendor or firmware to identify systemic compliance gaps.
Regularly audit compliance reports to ensure ongoing regulatory adherence.
Automate notifications for new violations to act quickly.
Export and archive reports to maintain audit-ready compliance records.