Assurance mapping
Aligned to the standards
that matter in the UK.
Compass learning is written and structured to support the awareness elements of the frameworks below — and to give you the completion evidence to prove it. Mapping supports your assurance programme; it is not a substitute for formal certification or legal advice.
Mapped controls
Completion tracking
CSV evidence exports
Management reporting
Framework & compliance mapping
Built to support recognised compliance frameworks.
UK GDPR
Lawful basis, data subject rights, breach reporting, DPIAs and the accountability principle.
Learning records for accountability
Data Protection Act 2018
Special category data, criminal offences data and safeguarding obligations.
Completion tracking by team
Cyber Essentials
Access control, secure configuration, malware protection, security updates and firewalls.
Mapped learning and completion evidence
IASME Cyber Assurance
Risk management, people, physical and operational controls, cloud and mobile.
Supporting awareness evidence
ISO/IEC 27001 (Awareness)
Annex A: A.6.3 information security awareness, education and training.
Annex A 6.3 awareness mapping
NCSC Cyber Aware
Passwords, MFA, updates, backups and phishing — for individuals and small teams.
Everyday-habits module records
NHS DSPT
The ten National Data Guardian standards, including staff responsibilities and confidentiality.
Healthcare pathway completion records
SRA Security Expectations
Confidentiality of client information, secure use of technology and incident preparedness.
Legal pathway completion records
Mapping supports the awareness elements of your assurance programme. It does not certify your organisation or replace technical assessment, legal advice or formal certification.
How mapping works
From learning to evidence in three steps.
Assurance should not mean chasing spreadsheets at audit time. Compass keeps the link between learning and framework expectations as people complete their training.
Evidence ready
when you are asked.
Map learning to expectations
Each module and pathway is mapped to the awareness elements of recognised UK frameworks and guidance.
Capture completion evidence
Every completed module, assessment and drill is recorded against the person, their team and the mapped framework.
Report with confidence
Export records for leadership, assessors and auditors — showing who learned what, and when.
Designed by cyber security practitioners. Built to help organisations reduce human cyber risk through realistic scenario-based learning.
Guide better decisions
Give your people the experience of making the wrong decision without the consequences.
Build safer behaviours, support compliance assurance and reduce human cyber risk through realistic scenario-based learning.