Thiqa

Your compliance posture, computed not claimed

One view of where every framework stands, derived from the evidence underneath it and updated as that evidence changes.

Request a call →Early access · work email only
One sweep · the posture is the mean of what was read, not a claim

Posture that moves when the evidence does

Radar

Compliance Posture

83%

74/89 controls compliant across active frameworks

Central Bank of Egypt

Inspect100

PCI DSS

Inspect100

ISO 27001

Inspect63
AI ingestion
Add framework

Overview

Controls89/89 controls fulfilled100
Policies89/89 policies published100
Documents54/86 documents up to date63
Evidence Collected54/86 documents up to date63

Gaps

3 block

15

down 4 this week

Augnow
6 · Evidence missingInspect
4 · Evidence staleInspect
3 · No policy draftedInspect
2 · Document expiredInspect
Open the queue

Risk Exposure

Medium

12345678910
NegligibleLowMediumHighCritical

Vendor Risk

Medium

12345678910
NegligibleLowMediumHighCritical

Critical Actions

All8Evidence4Documents2Policies2
Provide evidence for regulatory & breach reportingA documented process shall identify and maintain all compliance-lapse, cybersecurity-incident and data-breach reporting duties, including responsible authorities and required timeline.THQ-05GovernanceCBE · 1 refISO 27001 · 1 refHigh
Provide evidence for asset inventory & ownershipA documented asset-management process shall identify and maintain an inventory of information and associated assets with owners, location, description and lifecycle status.THQ-11Risk & Asset ManagementCBE · 1 refISO 27001 · 1 refHigh
Coverage per framework, derived from the evidence underneath

Coverage is a number computed from what has actually been collected. When an artefact expires the control that depended on it drops, and the framework percentage drops with it — visible to you long before it is visible to a regulator.

Works with PCI DSS v4.0ISO 27001CBEAgentEvidence

Radar FAQ

Where does the percentage come from?
It is computed from the controls that have current evidence, not entered by hand. Nothing in Radar is asserted.
How quickly does it react to a change?
Collection runs on each control’s own cadence, and the posture is recomputed as artefacts land or expire.

Stop reporting a posture you cannot evidence.