Qpoint Design

Compliance & Frameworks

How your policies stand against the frameworks you track.

✓ all 25 findings map to a framework

Track a framework to see it in your dashboards and reports. Tracking changes no policy. Enforcement Posture covers only what Qpoint can know and govern: 100% means Qpoint's part is done, not that the framework is met.

Tracked frameworks

	Kind	Enforcement Posture	Exceptions	Compliance Score

OWASP Top 10 for LLM Applications OWASP · 2025 A consensus list of the most critical security issues in applications that use large language models. Guidance, not a certifiable standard. Details + Configuration	risk taxonomy	40% 10 of 25 at ideal · 10 policies to change	7 active 3 tighten, 2 loosen, 2 match the default · 1 expiring soon	8 High 3 Med of 349.6K checks · 6 open	Untrack

Untracked frameworks

	Kind

OWASP Top 10 for Agentic Applications OWASP · 2026 The OWASP GenAI Security Project's list of the most critical security issues in agents that plan, call tools and act across systems. Guidance, not a certifiable standard. Details + Configuration	risk taxonomy	Track
NIST AI Risk Management Framework NIST · 1.0 (Jan 2023) A voluntary, outcome-based framework for managing AI risk: four functions (Govern, Map, Measure, Manage), 19 categories, 72 subcategories. Self-assessed; nothing to certify against. Listed here: the subcategories Qpoint can speak to, and three it cannot. Details + Configuration	risk-management framework	Track
ISO/IEC 27001 ISO · 2022 The information security management system standard. Annex A lists the controls an organisation declares in its Statement of Applicability. Details + Configuration	compliance standard	Track
SOC 2 AICPA · TSC 2017 (2022 points of focus) Trust Services Criteria a CPA firm reports against. Listed here: the criteria Qpoint can speak to, and one it cannot. Details + Configuration	compliance standard	Track

Compliance Score's check and session counts are seeded for this mock. Qpoint does not count them yet.