Reading the framework lens

Covered, partial, short, and not assessed.

Last updated September 22, 2026

Once you select a framework, its readiness appears alongside your capability view.

The states

A requirement is shown as covered when the capabilities behind it are assessed at the level the requirement needs, partial when some of them are, short when they are not, and not assessed when you have not yet answered enough of the assessment to say anything honest.

That last state is the one worth respecting. A requirement showing as not assessed is not a failure, it is an absence of information, and treating it as either a pass or a fail would be wrong.

Where to start

Sort by the requirements with the largest shortfall against a standard you are actually being measured on. Those are the ones that turn into findings. A requirement that is short on a framework nobody is holding you to is not urgent, however red it looks.

Next: What 'mapping under validation' means.