-
Notifications
You must be signed in to change notification settings - Fork 0
Getting Started
This page walks you through opening the tool for the first time and completing your first tasks. No prior knowledge of audits or compliance is required.
Download the file called mde-multi-audit-dashboard.html from the repository. Save it anywhere on your computer — your Desktop, Downloads folder, or a shared network drive are all fine.
The file is approximately 300 kilobytes. It contains everything the tool needs to run.
Double-click the file or drag it into a browser window. The tool works in any modern browser:
- Google Chrome (version 90 or later)
- Microsoft Edge (version 90 or later)
- Mozilla Firefox (version 90 or later)
- Apple Safari (version 15 or later)
The tool loads a set of fonts from Google Fonts on the first open. After that, it works completely offline. If you are working in an environment without internet access, the fonts will not load but everything else will function normally.
When the tool opens, you will see the Overview page. This page shows all nine compliance frameworks as cards with progress bars. At this point, everything will show 0% complete because no tasks have been marked yet.
The two controls in the top-right header are:
- The framework switcher on the left — click this to choose which framework to work on
- The Actions button on the right — click this to import files, export reports, or change the theme
You do not need to worry about everything at once. Start with one framework and work through it at your own pace.
If you are unsure which framework to start with, here is a simple guide based on the most common situations:
| Your situation | Recommended starting framework |
|---|---|
| UK-based client, basic certification needed | Cyber Essentials |
| UK-based client, assessor coming to verify | Cyber Essentials Plus |
| General enterprise security deployment | NIST CSF 2.0 |
| Client processes payment card data | PCI DSS |
| Cloud or SaaS service provider | SOC 2 |
| US federal or government-adjacent | NIST 800-53 |
| Organisation pursuing zero trust | NIST Zero Trust |
Click the framework switcher in the header and select your chosen framework from the dropdown list.
Once you are inside a framework, you will see a category dropdown near the top of the page. This lets you navigate between groups of tasks. By default it shows "All Controls" which displays every task in the framework on one page.
Each task card shows:
- The task name — a short description of what needs to be configured
- A reference code — the specific control in the framework this task satisfies
- A priority label — High, Medium, or Low
- A brief description — what the task involves in plain English
Below the task description, there is a button labelled "How to comply". Click it to expand a panel that tells you exactly how to complete the task. The panel shows:
- Which Microsoft portal to use (for example, Microsoft Intune or the Defender Portal)
- The exact menu path to navigate to the right setting
- Step-by-step instructions for what to configure
- In many cases, a PowerShell command or KQL query you can copy and run to verify the setting is correct
You do not need to know what PowerShell or KQL means to use this tool. The guidance text above the command box describes what the setting should look like in plain English.
When you have completed a task, you can mark it one of two ways:
- Tick the checkbox on the left side of the task card
- Use the status dropdown on the right side of the task card to select a status
The four status options are:
- Not Started — you have not begun this task yet
- In Progress — you have started but not finished
- Complete — the configuration is in place
- Blocked — something is preventing you from completing this, such as a missing licence or a decision that needs to be made
Use the notes field to record any relevant details — for example, a ticket number, the date you completed it, or an explanation of why it is blocked.
All your progress saves automatically. You do not need to click a save button.
When you are ready to share your progress, click the Actions button in the header and choose Export. You can export your data as:
- A CSV file for use in Excel or Google Sheets
- An HTML report suitable for client delivery
- A JSON configuration file for version control or importing later
For a non-technical summary suitable for managers or clients, open the framework you want to report on and click the Stakeholder Report button in the framework header. This generates a PDF-ready report in plain language.
See Export Options for full details.
Do I need to create an account? No. The tool requires no account, no login, and no registration of any kind.
Will my data be uploaded anywhere? No. Everything stays in your browser. See Data and Privacy for full details.
Can I share my progress with a colleague? Yes. Export your configuration as a JSON file and send it to them. They can then import it using the Import option in the Actions dropdown, which will load all your statuses and notes into their copy of the tool.
What happens if I close the browser? Your progress is automatically saved in the browser's local storage. When you reopen the file in the same browser on the same computer, everything will be exactly as you left it.
Can I use the tool on my phone or tablet? Yes. The tool is designed to work on mobile screens. The layout adjusts automatically. On smaller screens, some columns in task cards will stack vertically rather than sit side by side.