{% extends "base.html" %} {% block title %}PCI-DSS Compliance Report{% endblock %} {% block content %}

PCI-DSS v4.0 Compliance Report

Executive Summary

{{ report.total_findings }} Total Findings
{{ coverage.coverage_pct | round(1) }}% Coverage
{{ coverage.checked_controls }} Requirements Checked
{{ coverage.passed_controls }} Requirements Passed

Compliance Rate: {{ coverage.pass_pct | round(1) }}%

Table of Contents

Severity Breakdown

{% for severity, count in severity_breakdown.items() %} {% endfor %}
Severity Count Percentage
{{ severity }} {{ count }} {{ ((count / report.total_findings) * 100) | round(1) if report.total_findings > 0 else 0 }}%

PCI-DSS Requirements

{% set requirement_names = { 'network_security': 'Requirement 1 - Network Security Controls', 'secure_configuration': 'Requirement 2 - Secure Configuration', 'data_protection': 'Requirement 3 - Protect Stored Account Data', 'transmission_security': 'Requirement 4 - Strong Cryptography During Transmission', 'malware_protection': 'Requirement 5 - Protect from Malicious Software', 'secure_development': 'Requirement 6 - Develop Secure Systems', 'vulnerability_management': 'Requirement 6 - Vulnerability Management', 'application_security': 'Requirement 6 - Application Security', 'access_control': 'Requirement 7 - Restrict Access', 'authentication': 'Requirement 8 - Identify and Authenticate Users', 'physical_security': 'Requirement 9 - Physical Access', 'logging_monitoring': 'Requirement 10 - Log and Monitor', 'security_testing': 'Requirement 11 - Test Security', 'security_policy': 'Requirement 12 - Security Policies', 'incident_response': 'Requirement 12 - Incident Response' } %} {% for category, category_name in requirement_names.items() %} {% set category_controls = controls_by_category.get(category, []) %} {% if category_controls %}

{{ category_name }}

{% for control in category_controls %} {% endfor %}
Requirement Description Status Findings
{{ control.id }} {{ control.name }} {{ control.status | upper }} {{ control.finding_count }}
{% endif %} {% endfor %} {% if include_evidence and findings %}

Evidence Details

The following findings provide evidence of PCI-DSS control effectiveness or gaps.

{% for finding in findings %}

{{ finding.severity.value }} {{ finding.title }}

ID: {{ finding.id or 'N/A' }}
Source: {{ finding.source.value | upper }}
Check ID: {{ finding.check_id or 'N/A' }}
Resource: {{ finding.resource or 'N/A' }}
{% if finding.description %}

Description: {{ finding.description }}

{% endif %} {% if finding.remediation %}
Remediation: {{ finding.remediation }}
{% endif %}
{% endfor %} {% endif %} {% endblock %}