[EPIC][COMPLIANCE]: Compliance reporting dashboard

[crivetimihai]

Overview

Provide compliance reporting capabilities to help organizations demonstrate adherence to security frameworks and regulations (SOC2, GDPR, HIPAA, ISO 27001).

User Stories

Compliance Overview

• As a compliance officer, I want a dashboard showing overall compliance posture
• As a compliance officer, I want to see compliance score by framework
• As a compliance officer, I want to track compliance trends over time

Framework-Specific Reports

• As a compliance officer, I want SOC2 control mapping report
• As a compliance officer, I want GDPR data processing inventory
• As a compliance officer, I want HIPAA security rule checklist
• As a compliance officer, I want ISO 27001 control status

Evidence Collection

• As an auditor, I want to export audit logs for specific date ranges
• As an auditor, I want to export access control configurations
• As an auditor, I want to export encryption status reports
• As an auditor, I want automated evidence collection for common controls

Policy Enforcement

• As a compliance officer, I want to define compliance policies
• As a compliance officer, I want alerts when policies are violated
• As a compliance officer, I want remediation tracking

Reporting

• As a compliance officer, I want to generate PDF compliance reports
• As a compliance officer, I want scheduled report generation
• As a compliance officer, I want to customize report templates

Compliance Frameworks

Framework	Key Controls
SOC2	Access control, encryption, logging, change management
GDPR	Data inventory, consent tracking, right to deletion
HIPAA	PHI access logs, encryption at rest/transit, BAA tracking
ISO 27001	Risk assessment, incident response, asset inventory

Configuration

MCPGATEWAY_COMPLIANCE_ENABLED=true
MCPGATEWAY_COMPLIANCE_FRAMEWORKS=soc2,gdpr,hipaa
MCPGATEWAY_COMPLIANCE_REPORT_SCHEDULE=weekly

Acceptance Criteria

• Compliance dashboard shows posture overview
• Framework-specific reports generate correctly
• Evidence export works for audit periods
• Policy violations trigger alerts
• PDF reports generate with proper formatting

Milestone

Release 1.5.0

[crivetimihai]

Related issues (compliance reporting scope):

• [FEATURE][COMPLIANCE]: Compliance report generator - FedRAMP/HIPAA/SOC2 automation #2224 - Compliance report generator (FedRAMP/HIPAA/SOC2)
• [EPIC][COMPLIANCE]: Audit log viewer and compliance reports #2294 - Audit log viewer and compliance reports