Tenant in a Compliance Pack
What this screen is for
This screen shows one tenant's evaluation of one compliance pack the licence entitles, in system context, without entering the tenant. It shows the tenant's score beside the deployment's score in the same pack, the tenant's count of items in each result, every item with the number of the tenant's keys it concerns, and the tenant's score in every entitled pack.
The platform plane counts the tenant's keys and never names one. To see the keys by name, or the tenant's remediation plan and evidence package, open the tenant.
What must exist first
- The permission to read platform analytics, held in the platform tenant, shows the screen.
- The pack is one the licence entitles: under a trial, any pack of the catalogue; under a licence, a pack it names. A pack the licence does not include is shown locked (below).
- A pack that is not in this release's catalogue, and a tenant that does not exist or was deleted, show that the evaluation cannot be shown, with a link back to the overview.
Decisions you make here
Reading the score
The tenant's score, its counts and its score in every pack are the same values its row shows in the pack's tenant table. The deployment score is the pack's score across every tenant. All of them come from the same evaluation, on today's date in UTC.
A tenant with nothing scored, for example because it holds no live key, shows Not scored. A tenant holding a live key whose algorithm no catalogue resolves shows Incomplete, with no score, and the deployment score is Incomplete too. A control that could not be evaluated is not in any score, so a score never means that every control passed.
If the screen reports that the evaluation could not be read, for example because the licence could not be read at that moment, use the retry it offers.
Reading an item
A failing item states how many of the tenant's keys fail. An item a rule decides key by key, such as an algorithm the pack excludes, the security floor, the cryptoperiod or key custody, also states how many keys pass: the keys the rule examined and did not name. That is not a count of compliant keys, because the rule also examines keys it does not govern. A warning or calendar entry states how many keys it affects, grouped by the day it takes effect.
Items attested by the customer are listed apart: the platform cannot measure them, and the tenant records its own attestation. Keys whose algorithm no catalogue resolves are counted once, above the items, and never count towards a pass.
Moving to another pack
This tenant in every pack shows the tenant's score in each entitled pack. The current pack is marked; selecting another opens the same tenant in that pack.
Opening the tenant
Open as tenant asks for the same confirmation as entering the tenant from the tenant selector, and then shows the tenant's own evaluation of this pack, with its keys by name, its remediation plan and its evidence package. Entering a tenant is audited.
The button is offered exactly when the tenant selector offers this tenant; otherwise it is disabled, and the sentence below it says why: no platform role of yours can enter a tenant, the support-access authorizations could not be read, no tenant has authorized support access, this tenant has not authorized platform access, or the tenant list has not been read yet (the button becomes available once it is).
A pack not included in your licence
When the licence does not include the pack, the screen shows it locked, labelled Not included in your licence, with its description and controls and no evaluation. Evidence already issued for it still verifies; new evidence cannot be issued. Contact your account manager to add this pack to the licence opens the License screen, and View stored history opens the pack's history recorded while it was licensed.
When the licence ends
While the licence is close to its end or in its grace period, the note When the licence ends states that packs stop being evaluated and turn read-only when it ends. It cannot be dismissed. Review the licence opens the License screen.
Going back
In the breadcrumb, Compliance evaluation opens the overview of every pack and the pack title opens the pack across every tenant. The Compliance evaluation link above the page also returns to the overview.
How it relates to other screens
Compliance Evaluations shows every tenant in every pack, and each score opens this screen:
Compliance Evaluation shows the pack across every tenant, and each tenant row opens this screen:
Inside the tenant, its own evaluation names the keys: