# Compliance Tracking - Coming Soon

## Overview

The Herd Security Compliance page is a centralized hub for managing organizational compliance programs. It enables security and compliance teams to create structured campaigns, assign training and policy requirements to users, track completion progress, and maintain audit-ready records — all from a single interface.

## Creating a Compliance Campaign

The core action on the Compliance page is creating a Compliance Campaign. A campaign bundles together a compliance framework, associated trainings, policies, and assigned users into a single trackable program.

### Campaign Details

When creating a campaign, users configure the following fields:

#### Compliance Framework

Select the regulatory or security framework that the campaign is aligned to. Available options include:

* SOC 2
* ISO 27001
* NIST Cybersecurity Framework
* Custom frameworks (e.g. GDPR, HIPAA, PCI DSS, SOX, FISMA)

Framework selection is optional — teams running internal initiatives can leave this field blank or specify a custom framework name.

#### Campaign Name

A required field. Provide a clear, descriptive name that identifies the campaign, such as "SOC 2 Annual Compliance 2026" or "HIPAA Readiness Q2."

#### Description

An optional free-text field to describe the purpose, scope, and context of the campaign. This helps users and stakeholders understand what the campaign covers and why it exists.

#### Campaign Duration

Set the start and end dates for the campaign. These dates define the active window during which users are expected to complete their assigned trainings and policies, and are used to determine overdue status.

## Campaign Dashboard

Once a campaign is active, the Compliance page provides a live dashboard showing real-time progress across all assigned users and requirements.

### Summary Metrics

The top of the dashboard displays four key metrics at a glance:

| **Metric**  | **Description**                                                   |
| ----------- | ----------------------------------------------------------------- |
| Total Users | The number of users enrolled in the campaign.                     |
| Completed   | The count of completed training or policy items across all users. |
| In Progress | Items that have been started but not yet finished.                |
| Overdue     | Items that have passed their due date without completion.         |

### Overall Progress

A completion rate is calculated and displayed as both a ratio and percentage. For example, a campaign with 65 items completed out of 65 total shows a 100% completion rate. This gives a quick, high-level view of how the campaign is tracking.

## Trainings and Tracks

The Trainings and Tracks section lists all training programs assigned as part of the campaign. Each entry shows:

* Item name and type (e.g. TRACK)
* Due date for completion
* Progress — the number of individual training modules completed out of the total
* User completion — how many users have fully completed all modules in the track
* Overdue status
* Actions — available actions such as editing or removing the item

Example: A "SOC 2 Type 2" track with a due date of April 1, 2026, showing 95/95 trainings completed and all 5 users fully done would display as fully complete with no overdue items.

Data in this section can be exported in CSV or JSON format for use in audits or external reporting.

## Policies

The Policies section tracks acknowledgment of required organizational policies. Each policy entry displays:

* Policy name (e.g. Employee Handbook, Acceptable Use Policy, Information Security Policy)
* Due date for acknowledgment
* Progress — the number of users who have acknowledged the policy out of the total assigned
* Overdue status
* Actions

The following policies are commonly included in compliance campaigns:

| **Policy Name**                   | **Typical Due Date** | **Tracks**          |
| --------------------------------- | -------------------- | ------------------- |
| Employee Handbook                 | Campaign end date    | User acknowledgment |
| Acceptable Use Policy             | Campaign end date    | User acknowledgment |
| Change Management Policy          | Campaign end date    | User acknowledgment |
| Code of Conduct                   | Campaign end date    | User acknowledgment |
| Data Classification Policy        | Campaign end date    | User acknowledgment |
| Data Management Policy            | Campaign end date    | User acknowledgment |
| Disaster Recovery Policy          | Campaign end date    | User acknowledgment |
| Information Security Policy       | Campaign end date    | User acknowledgment |
| Risk Management Policy            | Campaign end date    | User acknowledgment |
| Security Incident Response Policy | Campaign end date    | User acknowledgment |
| Vendor Management Policy          | Campaign end date    | User acknowledgment |
| Workstation Security Policy       | Campaign end date    | User acknowledgment |

## Users and Groups

The Users and Groups section defines who is enrolled in the campaign. Teams can assign individual users or entire groups, making it easy to scope a campaign to a specific department, team, or the entire organization.

Progress metrics (completed, in progress, overdue) are calculated based on the users and groups assigned here.

## Compliance Reminders

The Compliance Reminders feature enables automated, periodic notifications to keep users on track throughout the campaign. Reminders can be delivered via integrated channels including Slack and Microsoft Teams.

Key capabilities include:

* Periodic refresher nudges tied to specific frameworks (SOC 2, HIPAA, GDPR, etc.)
* Automated reminders as due dates approach or pass
* Keeping the organization audit-ready by maintaining consistent engagement with compliance requirements

This feature reduces the risk of missed deadlines and ensures compliance stays top-of-mind without manual follow-up by the security team.

## Summary

The Herd Security Compliance page brings together everything needed to run a structured, trackable compliance program:

| **Feature**          | **Purpose**                                                                               |
| -------------------- | ----------------------------------------------------------------------------------------- |
| Campaign Creation    | Define the framework, name, description, and date range for a compliance initiative.      |
| Summary Metrics      | Instant visibility into total users, completions, in-progress items, and overdue counts.  |
| Trainings & Tracks   | Assign and monitor structured training programs with per-user and per-module tracking.    |
| Policies             | Track acknowledgment of required organizational policies across all enrolled users.       |
| Users & Groups       | Scope campaigns to specific individuals or teams.                                         |
| Compliance Reminders | Automate Slack/Teams notifications to keep users on track and certifications audit-ready. |
| CSV / JSON Export    | Download campaign data for external reporting or audit evidence packages.                 |

Together these features give security and compliance teams a single source of truth for tracking organizational compliance readiness across any framework.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://herd-security.gitbook.io/herd-security-docs/compliance/compliance-tracking-coming-soon.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.