Audit compliance status criteria

Audit compliance status is determined by the following criteria:

Audit Compliance—Single Server: If a single rule in an audit does not match the target server’s configuration, the server’s audit compliance status is Non-Compliant . The details pane in a Device explorer shows the Audit category as Non-Compliant and the summary column indicates how many rules are Non-Compliant out of the total number of rules.

For example, if an audit has 10 rules and 4 of the rules are Non-Compliant, the audit’s status is listed as Non-Compliant and the summary description displays: “4 of 10 Rules Out of Compliance.”

If more than one audit targets the server and if at least one of those audits is Non-Compliant, the aggregate compliance status for audits is also displayed as Non-Compliant. You can expand the Audit category of the details pane to see which of the audits are not in compliance, including a breakdown of how many rules in each audit are in compliance or out of compliance.

Audit Compliance—Device Groups: An audit that targets a group of servers (and all servers in all sub-groups) is considered Compliant if at least 95% of the servers in the group that are targeted by the audit have a compliance status of Compliant .

If more than 5% of the servers in the group targeted by an audit have a status of Non-Compliant, the aggregate compliance for audits displays as Non-Compliant. Another way to understand Non-Compliant for a device group is to remember that when less than 95% of the servers are Compliant, a status of Non-Compliant will display.

However, if more than 2%, but less than or equal to 5%, of all servers in a group have the status of Non-Compliant for that category, the status is Partial compliant . Another way to understand Partial-Compliant for a device group is to remember that when less than 98% but at least 95% of the servers are Compliant, a status of Partial-Compliant will display.

If less than 2% of all servers in a group have an Audit status of Non-Compliant for that category, the overall status is Compliant. Another way to understand Compliant for a device group is to remember that at least 98% of the servers are Compliant.

The details pane for a group of servers in the Compliance view shows whether all of the audits are compliant. This information does not expand to show a breakdown of individual servers and audits.