Evidence Dashboard

​

Overview

​

Accessing the Evidence Dashboard

https://app.continum.co/evidence

​

Dashboard Sections

​

Hash Chain Verification

​

Features

• Verification Status: Real-time integrity verification
• Signal Count: Total signals in the chain
• Last Verification: Timestamp of last verification
• Tamper Detection: Alerts if tampering is detected

​

Actions

• Verify Now: Run immediate verification
• Download Chain: Export complete hash chain
• View Details: See individual hash values

​

Regulatory Attestations

​

Features

• Framework Selection: Filter by GDPR, SOC 2, ISO 27001, HIPAA, etc.
• Coverage Percentage: Visual coverage indicator
• Requirement Mapping: Signals mapped to specific requirements
• Gap Analysis: Uncovered requirements with recommendations

​

Filters

• Framework (GDPR, SOC2, ISO27001, HIPAA, CCPA, EU_AI_ACT, PCI_DSS)
• Date range
• Sandbox type
• Coverage status

​

Incident Management

​

Incident List

• Incident ID
• Status (DETECTED, INVESTIGATING, REMEDIATING, VERIFIED)
• Risk level
• Created date
• Time since creation
• Assigned to

​

Incident Details

• Complete audit trail
• Status change history
• User roles and timestamps
• Cryptographic hashes
• Time-to-resolution
• Related signal details

​

Status Updates

1. Select incident
2. Choose new status
3. Enter user ID and role
4. Add notes (optional)
5. Submit

• Compliance officers can investigate and remediate
• Auditors must verify (cannot be the same person)

​

Compliance Policies

​

Policy List

• Policy name and description
• Detection criteria
• Active status
• Enforcement count
• Last enforcement

​

Policy Reports

• Total enforcements
• Signals by risk level
• Enforcement timeline
• Violation breakdown

​

Create Policy

1. Click “Create Policy”
2. Enter name and description
3. Define detection criteria:
   • Violation types
   • Risk levels
   • Regulations
4. Set active status
5. Save

​

Evidence Packages

​

Package List

• Package ID
• Framework
• Date range
• Signal count
• Coverage percentage
• Generated date
• Download status

​

Generate Package

1. Click “Generate Package”
2. Select framework
3. Choose date range
4. Select options:
   • Include incidents
   • Include hash chain
   • Include coverage analysis
5. Generate

​

Download Package

• Executive summary
• Compliance attestations
• Incident reports
• Hash chain verification
• Coverage analysis
• Recommendations

​

Data Retention

​

Retention Status

• Total signals
• Eligible for deletion
• Protected by incidents
• Oldest signal date
• Newest signal date

​

Retention Policies

• Framework
• Minimum retention days
• Maximum retention days
• Active status

​

Delete Signals

1. View eligible signals
2. Select signals to delete
3. Confirm deletion
4. Signals deleted, hashes preserved

​

Pattern Correlations

​

Correlation List

• Correlation ID
• Violation type
• Signal count
• Severity (MEDIUM, HIGH, SYSTEMIC_ISSUE)
• Detection date

​

Correlation Details

• Related signals
• Risk level distribution
• Sandbox type distribution
• Timeline
• Escalation status

​

Escalate Correlation

​

Filters and Search

​

Global Filters

• Date Range: Filter by creation date
• Framework: Filter by regulatory framework
• Sandbox: Filter by sandbox type
• Risk Level: Filter by risk level
• Status: Filter by status (for incidents)

​

Search

• Signal IDs
• Incident IDs
• Package IDs
• Correlation IDs

​

Exporting Data

​

Export Formats

• CSV: Spreadsheet format
• JSON: API format
• PDF: Formatted report
• XLSX: Excel format

​

Export Options

1. Apply filters
2. Click “Export”
3. Select format
4. Choose fields to include
5. Download

​

Notifications

​

Email Notifications

• Incident created
• Incident status changed
• Hash chain tampering detected
• Coverage below threshold
• Package generated

​

Webhook Notifications

{
  "url": "https://your-app.com/webhook",
  "events": [
    "incident.created",
    "incident.verified",
    "hash_chain.tampered",
    "coverage.below_threshold"
  ]
}

​

External Auditor Access

​

Create Auditor Token

1. Navigate to “Auditor Access”
2. Click “Create Token”
3. Enter auditor email
4. Select permissions:
   • READ_SIGNALS
   • READ_ATTESTATIONS
   • READ_INCIDENTS
   • VERIFY_HASH_CHAIN
   • DOWNLOAD_PACKAGES
5. Set expiration date
6. Generate token

​

Auditor Activity Log

• Timestamp
• Auditor email
• Action performed
• Resource accessed
• IP address

​

Dashboard Metrics

​

Overview Metrics

• Total signals
• Active incidents
• Coverage percentage
• Recent verifications

​

Trend Analysis

• Incident volume over time
• Coverage trends
• Violation type distribution
• Time-to-resolution trends

​

Compliance Score

• Coverage percentage
• Incident resolution rate
• Hash chain integrity
• Policy enforcement

​

Best Practices

​

Daily Tasks

• Review new incidents
• Verify hash chain integrity
• Check notification alerts
• Monitor coverage metrics

​

Weekly Tasks

• Review MEDIUM risk incidents
• Update incident statuses
• Analyze correlation patterns
• Review policy enforcement

​

Monthly Tasks

• Generate evidence packages
• Review coverage reports
• Update retention policies
• Audit external access logs

​

Quarterly Tasks

• Comprehensive compliance review
• Generate audit reports
• Update compliance policies
• Review framework mappings

​

Keyboard Shortcuts

• Ctrl/Cmd + K: Quick search
• Ctrl/Cmd + N: Create new incident
• Ctrl/Cmd + E: Export current view
• Ctrl/Cmd + R: Refresh data
• Ctrl/Cmd + F: Filter panel

​

Mobile Access

• Responsive design
• Touch-optimized interface
• Push notifications
• Quick actions

​

Troubleshooting

​

Hash Chain Verification Failed

1. Check date range
2. Verify signal integrity
3. Contact support if tampering detected

​

Cannot Update Incident Status

1. Verify user role
2. Check segregation of duties
3. Ensure valid status transition

​

Package Generation Timeout

1. Reduce date range
2. Try again during off-peak hours
3. Contact support for large packages

​

Next Steps