Compliance + governance + privacy primitives
Visual primitives for the Mufflermen compliance + governance + privacy console — modelled against AU-specific obligations (Privacy Act 1988, OAIC Notifiable Data Breach scheme, ASD Essential 8, IRAP) plus the international frameworks the workshop pursues (ISO 27001, SOC 2, GDPR, PCI DSS v4). Visual reference only — no real backend wired.
Compliance + governance + privacy primitives is a reusable Oak Flats Muffler Men UI primitive with documented states, accessibility expectations, theme behavior, and implementation evidence.
Compliance + governance + privacy primitives: Visual primitives for the Mufflermen compliance + governance + privacy console — modelled against AU-specific obligations (Privacy Act 1988, OAIC Notifiable Data Breach scheme, ASD Essential 8, IRAP) plus the international frameworks the workshop pursues (ISO 27001, SOC 2, GDPR, PCI DSS v4). Visual reference only — no real backend wired.
Compliance dashboard
Top-level dashboard composing framework status cards with a summary strip — frameworks, compliant, lapsed, average completion.
Framework status card
Single framework card — iconmark, status chip, percent meter, last + next audit dates. ISO 27001 / SOC 2 / GDPR / E8 / IRAP.
Data processing record
ROPA / Article-30 record — category, purpose, legal basis, retention, recipients, transfers in semantic dl/dt/dd.
DPA viewer
Data processing agreement viewer — vendor, signed date, term, version, key clauses, download CTA.
Sub-processor list
Schedule 2 sub-processor table — vendor + service + location + DPIA status + last-reviewed.
Consent management banner
Full consent surface — Essential / Functional / Analytics / Marketing / Sale-of-data toggles + preference center + save action.
DSR request form
Data subject request form — identity verification, request type, scope chips, three-step flow.
Retention schedule editor
Retention rule editor — category + duration + disposal method + legal hold toggle with live summary.
Encryption status
Visual indicator — at-rest (AES-256-GCM) + in-transit (TLS 1.3) + key management chip (KMS / HSM).
Pentest results card
Engagement card — tester, dates, executive summary, findings by severity (critical/high/medium/low) + download CTA.
Vulnerability disclosure
Public VDP card — contact email, PGP key + fingerprint, SLA chip, hall of fame, scope in/out lists.
Policy version diff
Side-by-side or unified policy diff — added/removed/changed lines highlighted, version chips, effective date.
Security posture score
Big 0-100 score with dial, contributing factor chips (MFA / DLP / EDR) and a 14-day trend sparkline.
Incident disclosure banner
Top-of-app banner — severity chip + status timeline + mitigation update + statuspage link. role=alert.
Full compliance dashboard
Composed dashboard — framework status row, sub-processor table, DPA viewer aside, consent banner, security posture, audit log.