📋 Compliance

🏗️ Under the Hood

💬 Chat

Compliance Management

Control Implementation Summary (CIS)

📊 Implementation Status Overview

Track control implementation progress and AWS inheritance status across your selected compliance framework.

AWS Partition (for CRM data)

Framework

Inheritance Filter (Multi-Select)

Implemented

Partially Implemented

Planned

Not Applicable

To Be Determined

AWS Inherited

Customer Responsibility

Shared Responsibility

Framework 1 Control	Title	Framework 2 Control	Title	Delta Analysis	Details
Select frameworks above to generate crosswalk analysis

Framework	Low/Level 1	Moderate/Level 2	High/Level 3
NIST SP 800-53	125 controls	219 controls	318 controls
FedRAMP	125 controls	253 controls	386 controls
CMMC 2.0	~17 practices	~110 practices	~130 practices
CCCS ITSP.30.031	219 controls (Medium baseline)
PCI-DSS v4.0	362 requirements
PSD2	EU Payment Services Directive 2
SOC 2	64 trust service criteria
ISO 27001:2022	114 controls (Annex A)

Compliance Monitoring Dashboard

📋 Controls Library

Database Required

❌ Database Connection Required - Deploy ComplianceControlsTable

❌ API Gateway Required - Configure correct endpoint

❌ Controls Data Required - Populate database with OSCAL data

🔧 AWS Config Conformance Packs

Live Data

Real-time compliance monitoring via Config rules and conformance packs

📊 CloudTrail Event Analysis

Live Data

Real-time analysis of CloudTrail events for compliance monitoring

🔍 AWS Audit Manager

Live Data

Automated evidence collection and compliance assessments

🛡️ Security Hub Findings

Available

Security findings analysis and compliance impact assessment

📝 Policy Documents

Available

Organizational policies and compliance documentation storage

📊 Compliance Reporting

Available

Generate comprehensive compliance reports and documentation

Compliance Reporting & Documentation

📊 Export & Reporting Tools

📋 Control Assessment Matrix

Export complete control assessments with implementation status, narratives, and OSCAL metadata

📊 CIS Export (CSV)

Export your Control Implementation Summary with implementation status, inheritance, and narratives. Run a Delta View in the Crosswalk tab first.

🔄 Framework Crosswalk Reports

Generate delta analysis and gap assessments between compliance frameworks

📈 Compliance Dashboard

Real-time compliance status and monitoring reports from AWS services

📁 Document Management

Upload and manage compliance policies, procedures, and evidence documents

📋 Available Report Templates

FedRAMP SSP Template

System Security Plan

SOC 2 Readiness

Type II Assessment

NIST CSF Report

Cybersecurity Framework

Custom Template

Organization Specific

🏗️ DeterBot: ComplianceBot Under the Hood

🛡 DeterBot: ComplianceBot v0.0.9

Production-ready AI compliance management platform built on AWS serverless architecture. Helps security teams document controls across multiple frameworks simultaneously, leveraging GenAI semantic crosswalk to identify overlap and reduce documentation effort.

📋 Multi-Framework Controls

NIST 800-53, FedRAMP, CMMC, HITRUST, PCI-DSS, SOC 2, PSD2, CCCS. Select multiple, document once where controls overlap via GenAI semantic crosswalk.

🤖 GenAI Semantic Crosswalk

Claude 3.5 Sonnet maps controls across frameworks semantically. 143 HITRUST→NIST, 137 PCI→NIST, 65 SOC2→NIST mappings with confidence ratings and rationale.

☁ AWS Inheritance

CRM auto-populates AWS Inherited / Shared / Customer responsibility. Inherited controls pre-checked, customer controls flagged for documentation.

📊 CIS & Export

Live Control Implementation Summary with status, inheritance, narrative. Delta view becomes CIS. Export to CSV for auditors.

Framework Coverage

✅ Authoritative (OSCAL)

NIST SP 800-53 Rev5 (1,193 controls)
FedRAMP Low / Moderate / High
CMMC 2.0 Level 1/2/3
CCCS ITSP.30.031 Medium

⚠ GenAI-Generated + Mapped

HITRUST CSF v11 (35 controls)
PCI-DSS v4.0 (138 controls)
SOC 2 TSC (70 controls)
PSD2 (pending)

🚧 Not Available

ISO 27001 (requires license)
NIST CSF 2.0 (coming soon)

🏗 System Architecture

CloudFront + S3

Global CDN delivery. OAC enforces S3 access only via CloudFront. deterbot.com + compliancebot.deterbot.com aliases with ACM wildcard cert.

API Gateway + Lambda

REST API with CORS. Routes: /controls, /crosswalk, /chat, /assessment, /crm, /workloads. Lambda handles all business logic with Bedrock fallback chain.

DynamoDB

Single table design. PK/SK patterns: CONTROL#, BASELINE#, MAPPING#, USER#, WORKLOAD#. On-demand billing. 1,975+ items across all frameworks.

Amazon Bedrock

Claude 3.5 Sonnet primary. Fallback chain: Claude 3 Sonnet → Claude 3 Haiku → Titan. Used for chat, GenAI crosswalk mapping, and auditor prompt generation.

📚 Data Sources

✅ Authoritative OSCAL Sources

NIST SP 800-53 Rev5 — 1,193 controls
Source: github.com/usnistgov/oscal-content

FedRAMP Baselines — Low/Moderate/High
Source: github.com/GSA/fedramp-automation

CMMC 2.0 — Level 1/2/3
Source: DoD CMMC documentation

CCCS ITSP.30.031 — Medium baseline
Source: cyber.gc.ca

🤖 GenAI-Generated Frameworks

HITRUST CSF v11 — 35 controls
Generated + mapped to NIST Moderate (143 mappings)

PCI-DSS v4.0 — 138 controls
Generated + mapped to NIST Moderate (137 mappings)

SOC 2 TSC — 70 controls
Generated + mapped to NIST Moderate (65 mappings)

PSD2 — Pending
Use PCI-DSS crosswalk as proxy

☁ AWS Live Data Sources

CRM (Control Responsibility Matrix)
AWS Artifact download → DynamoDB. Auto-populates inheritance (Inherited/Shared/Customer) on controls.

AWS Config
Conformance packs for real-time compliance monitoring.

CloudTrail
Audit evidence for access control requirements.

AWS Audit Manager
Automated evidence collection and assessments.

🚧 Not Yet Available

ISO 27001:2022
Requires ISO license (~$200). Use NIST crosswalk.

NIST CSF 2.0
Framework structure ready, data pending.

AWS Artifact Documents
Manual download required (SOC 2, ISO cert, FedRAMP ATO). Upload via Reporting → Document Management.

📊 Performance & Scale

1,975+

DynamoDB Items

Frameworks

345

GenAI Mappings

<200ms

API Response

Idle Cost

Lambda Configuration

Runtime: Python 3.11
Memory: 128MB (512MB during GenAI jobs)
Timeout: 30s (600s during generation)
Concurrency: On-demand

Bedrock Model Fallback Chain

1. Claude 3.5 Sonnet v2 (primary)
2. Claude 3 Sonnet
3. Claude 3 Haiku
4. Amazon Titan Text Express

Estimated Monthly Cost

CloudFront: ~$0.01/GB transfer
Lambda: Free tier covers light usage
DynamoDB: On-demand, ~$0.25/M reads
Bedrock: ~$0.003/1K tokens (Haiku)

⚠️ LEGAL NOTICE: The only source of truth for your legal requirements are your own compliance and legal teams. ComplianceBot does not provide legal guidance. It provides you with information to help inform your dialog with your compliance and legal counsel.

DeterBot: ComplianceBot

🛡️ Compliance Analysis Ready

Framework	Coverage	Status
SOC 2 Type II	Security & Privacy Controls	Active
HIPAA	Healthcare Data Protection	Available
PCI DSS	Payment Card Security	Available
GDPR	EU Data Protection	Available
ISO 27001	Information Security Management	Available
FedRAMP	Federal Risk Authorization	Available

Compliance Features

Feature	Description	Status
🔍 Control Assessment	Analyze compliance controls and gaps	Active
📋 Audit Preparation	Generate audit documentation and evidence	Active
⚖️ Risk Analysis	Identify and assess compliance risks	Active
📊 Reporting	Create compliance reports and dashboards	Active
🔄 AWS Config Integration	Monitor AWS resource compliance	Active
📝 Policy Review	Analyze policies against frameworks	Active

What compliance challenge can I help you with today?

DeterBot: ComplianceBot

Sign In

🛡️ DeterBot: ComplianceBot

Model Settings

Personas

Chat Options

Compliance Management

Workload Definition & Security Boundary

🏢 Workload Definition ▼

☁️ AWS Resource Discovery ▼

🔍 Control Artifact Validation ▼

🤖 Automated Evidence Detection

Validation Results

Regulatory Controls in Scope

Control Implementation Summary (CIS)

Control Framework Crosswalk

Framework Control Count Summary

Framework Notes

Compliance Monitoring Dashboard

Compliance Reporting & Documentation

📊 Export & Reporting Tools

📋 Control Assessment Matrix

📊 CIS Export (CSV)

🔄 Framework Crosswalk Reports

📈 Compliance Dashboard

📁 Document Management

📋 Available Report Templates

🏗️ DeterBot: ComplianceBot Under the Hood

🛡 DeterBot: ComplianceBot v0.0.9

Framework Coverage

🏗 System Architecture

📚 Data Sources

📊 Performance & Scale

🛡️ Compliance Analysis Ready

Compliance Features