Compliance scored continuously. KPIs reported on schedule.
Netgraph maps evidence to frameworks continuously — DPDP Act 2023, CERT-In, RBI, SEBI CSCRF, IRDAI, ISO 27001, SOC 2, GDPR, HIPAA — and its KPI Report Generator turns a 136-KPI catalog into scheduled, delivered reports whose numbers come from the running platform, not a canned template. When a breach is declared, the statutory clocks and hash-chained evidence packs are already in the same system.
What ships in the module
Governance that runs itself — and proves itself.
NG-CC-RPT — the report engine
Define the report once. It ships itself, with real numbers.
A report in Netgraph is a selection of sections and KPIs, a schedule, a recipient list and a set of formats. The generator pulls live values at run time — SOC and AIR metrics straight from the platform — renders to every requested format, and delivers over SMTP on the cron you set.
- 136 KPIs across 15 sections — pick exactly what each audience needs to see.
- 18 prebuilt packs cover the standard asks; custom builds cover everything else.
- One schedule, four formats — CSV for the analyst, PDF for the board, same numbers.
- Compliance reports ride the same scheduler — framework posture on a cadence.
Functionality map
Module functions at a glance
| Function | What it does | Where it lives |
|---|---|---|
| Compliance scoring | Continuous evidence collection mapped to nine frameworks (DPDP, CERT-In, RBI, SEBI CSCRF, IRDAI, ISO 27001, SOC 2, GDPR, HIPAA) | Compliance |
| KPI Report Generator | 136-KPI / 15-section catalog; custom builder + 18 prebuilt packs | Compliance ▸ Reporting ▸ KPI Report Generator |
| Live overlay | Real SOC / AIR metric values from the running platform at generation time | Report engine |
| Scheduler & delivery | Timepicker / cron scheduling; SMTP delivery in CSV, XLS, HTML, PDF; schedulable compliance reports | Compliance ▸ Reporting |
| Statutory clocks | Declared-incident clocks and hash-chained evidence packs for regulator submissions | Forensics ▸ Declared Incident |
| Dashboards | SOC Metrics, KPI Metrics, KPI Tracker, Risk Metrics, CISO Dashboard | Dashboards menu |
| Custom dashboards | Drag/resize canvas dashboard creator | Dashboards ▸ Custom |
| Data protection | DPDP-first design: UEBA pseudonymization, consent-aware contact handling | Platform-wide |
Works with everything on the graph
Forensics & IR
The statutory clocks and hash-chained evidence packs behind regulator submissions live in the forensics module.
Explore→UEBA
Behavioural analytics with DPDP pseudonymization built in — risk insight without exposing identities by default.
Explore→Platform & Admin
Hash-chained AAA audit trails and tenant governance underpin every compliance claim the reports make.
Explore→