> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports/assessments.md).
# Review assessments
The **Assessment** page shows the latest compliance assessment profile results. It provides an up to date high level compliance view.
The display shows the following information:
| Display element | Description |
| ---------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Assessment by Score widget |
Shows how many assessment profiles were in each percentage of compliance range, color coded as follows:
Red: 0-50%
Orange: 51-99%
Green: 100%
|
| Assessment by Label widget | Shows how many of each label were assessed, for example, AWS or Azure. |
| Table showing assessment profiles grouped by compliance standard |
Displays assessment profiles grouped by standards, including:
Standard name: The standard used in the assessment profile.
Asset Group: The asset group the assessment profile assessed.
Score: The score assigned to the asset group. It is calculated as the number of assets that passed divided by the sum of assets that passed plus failed (the total number of assets that were evaluated).
Control status: How many assets in an asset group passed the rule check (green), how many were not evaluated (grey), and how many failed (red).
Failed controls by severity: Of the assets that failed the rule check, what was the severity of the failure for each asset; critical (dark red), high (red), medium (orange), low (blue), and informational (grey).
Labels: The labels that were evaluated for the asset group in the assessment profile, for example, AWS or Azure.
Last evaluation time: The last time the rule was run.
|
## See specific assessment profile results
You can right click a specific assessment profile and select **View Profile Report**, which opens the report generated by the assessment profile. The report contains two tabs, **Controls** and **Assets**. You can also access this page by hovering over the end of the row and selecting the view arrow.
### Controls tab
The **Controls** tab shows:
| Display element | Description |
| ---------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Compliance Score** widget | Displays the overall compliance score for the assessment profile and when it was last checked. |
| **Controls by Status** widget | A pie chart indicating which controls passed, failed, or were not assessed for a specific asset group. If a control is not assessed, it will not cause the asset group to fail the rule check. The status is color-coded (green=passed, red=failed, grey=not assessed). |
| **Controls by Severity** widget |
A pie chart indicating severity level for controls for an asset group. Possible values:
Critical
High
Medium
Low
Informational
|
| Table showing controls and their rules grouped by category |
Displays rules grouped by controls and categories, including:
Name: The control name.
Score: The rule score. For control, shows the average of the rule scores. For category, shows the average of the control scores.
Status: Whether the control/rule passed or failed. The definition of pass varies by rule. See Cortex documentation for details.
Severity: The control/rule severity rating (Critical, High, Medium, Low, Informational).
Assets: The asset status. Each number links to the Asset tab, filtered by control/rule with the status.
Issues: Links to the Issues table in a new tab, filtered for relevant issues.
|
#### View control details
Clicking the row for a specific control in the **Controls** tab opens the **Control Details** side panel that shows information about the control in the **Overview** tab and the **Rules** tab.\
| Tab | Details |
| ------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Overview** |
The Overview tab shows the following control metadata.
General Details: Includes the standards, category, sub category, created at, and automation status associated with the control.
Description: The control description.
Standard Mitigation Action: A predefined measure or step to address and reduce risk related to the control.
Assessment Results: Includes the asset group, linked issues, and linked findings.
|
| **Rules** |
The Rules tab shows the following information about the rules in the control.
NOTE
If there are no rules associated with the control, the control will be assigned a severity of low.
Rule name
Rule ID
Type
Severity: The overall severity of the control is determined by the rule with highest severity.
|
#### **View rule details**
Clicking the row for a specific rule opens the **Rule Details** side panel.
This panel shows information about the rule, including:
* **General Details:** Rule name, rule ID, type, and severity, and scanned asset categories.
* **Description:** The rule description.
* **Remediation steps:** Actions from the standards provider or from custom controls to correct or resolve asset non-compliance identified during the assessment.
* **Assessment Results:** Includes the asset group, linked issues, and linked findings.
## Assets tab
The **Assets** tab shows:
| Display element | Description |
| ----------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Compliance Score** widget | Displays the overall compliance score for the asset group and when it was last checked. It represents the aggregated status per asset. Assets with one failure are considered failed. |
| **Distinct Assets by Status** widget | A pie chart indicating which assets in an asset group passed for all rules, failed one or more rules, or were not assessed. |
| Table listing all the assets in the asset group |
The distinct checks run for every asset covered by the assessment profile. Every row in the table represents a rule per asset for this standard.
Asset name: The name of the asset.
Asset type: For example, storage bucket, endpoint, VM instance, human identity.
Status: Whether the asset passed or failed the rule.
Source: Whether the source is an issue and/or finding.
Rule: The rule that ran on the asset.
Control: The control that contains the rule.
|
Clicking the row for a specific asset opens a side panel showing asset details organized under the following tabs:
* Overview
* SBOM
* Access
* Vulnerabilities
Right clicking on a row includes the following options:
* **View in Asset Inventory**: Opens the **Inventory → Assets → All Assets** page showing asset details.
* **View Control Side Panel**: Opens the **Control Details** side panel.
* **View Rule Side Panel**: Opens the **Rule Details** side panel.
## View the compliance assessment of an individual asset
You can review the compliance performance of any asset to gain insight into how a specific asset aligns with assigned security standards and individual controls.
You can review the compliance performance of any asset to gain insight into how a specific asset aligns with assigned security standards and individual controls. This view allows you to:
* Focus on an individual asset’s compliance performance in the context of a specific standard, understand the standard and category placement of each individual control, and get immediate access to the findings or issues created in the case of violations.
* Identify the severity of the individual controls violations through their association with underlying rules. Access the underlying findings and issues for remediation guidance and the context necessary to perform the prescribed action.
* Identify the actions you need to take to improve the compliance score of an individual asset.
To view compliance assessment for an asset:
1. Navigate to **Inventory → Assets**.
2. Click on an asset to open asset details.
3. Click on the **Compliance** tab.
The **Compliance** tab includes the following information:
| Section | Description | Functional tip |
| --------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- |
| Overall Compliance Score | Displays asset’s compliance score and the number of standards and controls used for assessment. | Use this for a high-level quantification of asset compliance against assessed standards. |
| Controls by Status | Shows the distribution of controls across **Passed**, **Failed**, and **Not Assessed**. | Click a specific status to filter the **Standards** and **Controls data**. |
| Standards, Score, Controls Passed | Lists the standards by which the asset is assessed, including the score and passed control count for each. | Click a specific standard to filter the items in the **Controls Overview** table by that specific standard. |
| Controls Table | An exhaustive list of controls for which an asset may be assessed including columns for **Standard**, **Category**, **Control**, **Severity**, and **Status**. | Click a control to view the control details, or click a **Failed** status to view details of the related finding or issue. |
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/compliance/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports/assessments.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.