control objective compliance score calculation

[lt3]

Can anyone please explain how compliance score is calculated. I'm using pdi (personal development instance) with servicenow sample data (san diego)

In attached screenshot can anyone please explain why control is non compliant but control objective compliance score is 100% (it is original sample data, no changes)? If there is very detailed material somewhere about those calculations for control objectives, entity types etc, please share.

I've watched different videos and general principal for compliance score should be 'sum of all compliant weights divided by all weights' (draft, retired and not applicable are excluded). When I look at the data in pdi, control objective and their compliance score, then some seem to follow this formula and others not.

Thank you

[Community Alums]

Hi,

Here are details about how the compliance score percentage is calculated when a Policy statement has children.

There are multiple steps to this one.

Step 1 - Calculate the score of the main policy statement assuming there are no children - this is the same way described previously.

• If all controls are of the same weight
• 1. Count the number of controls that are either compliant or non-compliant for a total # of controls. (Example: Total of 20 controls that are either compliant or non-compliant).
  2. • Controls that are in Draft or that have a status of Not Applicable are not included in this calculation.
  3. Count the number of controls that are compliant.
  4. • Example:  15 of the controls are compliant.
  5. Divide the # of compliant controls by the total number of controls.  (Example:  15/20 = .75 * 100 = 75%)
• If the controls are of different weights
• • Do the same thing, except instead of counting the controls - count the weight of the controls.

Step 2 - Look at the compliance scores of all the children and take an average. 

• Example - there are 4 child Policy Statements.  Their scores are:  74, 88, 100 and 85.  
• The average of these 4 is 87

Step 3 - Add the average score of the children to the value from step 1 (the main policy statement).  Divide by 2.  This is the compliance score of the policy statement including it's children.

• Example:  75 + 87 = 162
• 162 / 2 = 81
• In this example - the compliance score for the main Policy statement is 81.

Mark my answer correct & Helpful, if Applicable.

Thanks,
Sandeep

[lt3]

Hi

Based on these steps I expect the control objective compliance score to be 0, because there is only one control and it is is non compliant. Formula should be 0 divided 1 multiply 100 = 0%. But for some reason the compliance score is 100%. 

Thank you for the input