Skip to main content

Readiness Scores Explained: Security, Organisation, Risk

The same three circles show up on Dashboard, Tasks, and Frameworks — here's what they actually measure, and how they differ from a framework's own progress bar.

Written by Upendra Varma

You'll see the same three circles — Security, Organisation, Risk — in several places: the Dashboard's Health section, and again above the task list on any framework's Tasks page.

What they measure

These three names deliberately mirror the three groups under Manage in the left nav:

  • Security — infrastructure, code, vulnerabilities, and security documents

  • Organisation — people, policies, training, devices, and access

  • Risk — the risk register and vendor management

Each percentage is your test pass rate within that area — company-wide, across everything you've connected, not scoped to any one framework. That's why they stay the same whether you're looking at the Dashboard or a specific framework's Tasks page: enabling a new framework or switching which one you're viewing doesn't change your underlying infrastructure, people, or risk posture.

How this differs from a framework's own progress

Don't confuse these with a framework's own Overall progress bar (Dashboard) or Readiness bar (Tasks page) — those are a different, framework-specific number, based on how many of that framework's own tasks are complete:

So on a SOC 2 Tasks page, you'll see both: "SOC 2 Type 2 Readiness: 51%" (SOC 2-specific task completion) and the same Security/Organisation/Risk circles (your general, framework-independent posture) side by side. The framework bar moves as you complete that framework's tasks; the three circles move as your underlying tests pass or fail, regardless of framework.

Did this answer your question?