🛡️ Brainframe DEFEND (Aikido)

"Automated security at the heart of your compliance."
The Brainframe DEFEND module offers automatic control checks across code, applications, cloud environments, and domains.

More details available on the product page

By linking DEFEND to Brainframe GRC, you integrate real-time vulnerability scanning directly into your compliance frameworks, ensuring up-to-date risk assessments and faster remediation cycles. Here's how the controls look like in your compliance dashboard:

1️⃣ Setting Up the Integration

1. Go to the Compliance module and click + on any requirement → Automated control.

2. On first use, the configuration screen appears. Enter:

• Endpoint
• Client ID
• Client Secret

3. Click Test connection.
4. If successful → Save the configuration.

2️⃣ Selecting Automated Control Sets

1. Once connected, select from pre-defined standards.

2. Example: choose ISO 27001 controls.

3. Next, pick the Aikido control groups mapped to that requirement.

4. Brainframe will now display:

• (A) Relevant DEFEND controls
• (B) Controls with issues (linked to Aikido)
• (C) Combined coverage view = Manual maturity + Automated controls

3️⃣ Modifying Linked Controls

1. Click the edit icon to update linked controls.

2. You may select multiple sets depending on needs — though best practice is to keep selections focused on relevant controls.

4️⃣ Reporting & Printing

Automated control results are included in Brainframe reports:

1. Simple report – lists applied controls.

2. Detailed report – adds compliance status (compliant/failing).

3. Excel export – contains the same control information for offline review.

5️⃣ Best Practices

• 📊 Use coverage metrics to combine manual + automated control maturity.
• ⚡ Regularly refresh integrations to ensure new controls and vulnerabilities are synced.
• 📝 Leverage reporting outputs for auditors and management reviews.

🎯 Visual Checklist

• [x] Integration configured
• [x] Test connection successful
• [ ] Automated control sets selected and linked
• [ ] Reports generated and validated
• [ ] Regular sync and coverage review scheduled

Updated on: 05/09/2025