Compliance Rating

A compliance rating is a measure of how well an organization's security posture aligns with established regulatory frameworks and industry standards such as the NIST Cybersecurity Framework, ISO 27001, PCI-DSS, HIPAA, SOC 2, GDPR, NIS2, and DORA. In third-party cyber risk management, compliance ratings help organizations evaluate whether vendors meet the regulatory and contractual obligations relevant to the business relationship. Black Kite's Compliance Rating correlates technical findings and parsed documentation to specific controls across mapped frameworks, providing both percentage scores and control-level gap analysis.