> ## Documentation Index
> Fetch the complete documentation index at: https://syteca.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# How to assess and improve policy compliance

> Review policy compliance across your environment, identify non-compliant endpoints and risk factors, and remediate issues to improve policy health and overall security posture.

## Before You Begin

Ensure that the policy is assigned to all endpoints that are expected to comply with it.

For consistent coverage and easier administration, it is strongly recommended to assign policies to **Endpoint Groups**. Policies assigned to a group are automatically inherited by all endpoints that belong to that group, including newly added endpoints.

## Option 1: Review Compliance from the Dashboards Page

1. Open the  [Dashboard](/docs/espm/dashboards-page)  page.
2. In the **Risk Factors Summary** widget, select the **Policies** tab.
3. Review the following information for the policy:
   * Policy Health Score
   * Number of Non-Compliant Endpoints
   * Number of Active Risk Factors
4. Click the **Endpoints** count to view the endpoints currently affected by the policy.
5. Review the affected endpoints and identify the risk factors contributing to non-compliance.
6. [Remediate](/docs/espm/riskfactors/recommend-and-remedy)  the corresponding risk factors on each endpoint.
7. Once updated probe results are received from the endpoints, policy compliance and health scores are automatically recalculated.

## Option 2: Review Compliance from the Policies Page

1. Open the [Policies page](/docs/espm/policies/viewing-policies).
2. Select the policy you want to review.
3. Examine the control health information to identify the controls with the lowest health scores.
4. Click a control card to view the active risk factors associated with that control.
5. For each risk factor, review the number of endpoints where the risk factor is currently active.
6. Click the endpoint count for a risk factor.
7. The  [Endpoints page](/docs/espm/endpoints/endpoints-page)  opens with filters applied, displaying only the affected endpoints.
8. Remediate the risk factor across the listed endpoints.
9. To view detailed remediation guidance, open the  [Risk factor details](/docs/espm/riskfactors/risk-factors-details)  page.
10. After the endpoints report updated probe results, policy health, control health, and compliance status are automatically updated.

## Key Considerations

* Controls with low health scores often indicate the areas having the greatest impact on overall policy compliance.
* A single risk factor may affect multiple endpoints and multiple controls.
* Policies assigned through Endpoint Groups are inherited automatically and cannot be removed from individual endpoints unless the endpoint is removed from the group.
* Compliance improvements become visible after updated probe results are received from the affected endpoints.

## Related

<CardGroup cols={2}>
  <Card title="How to investigate risk factors" icon="workflow" href="/docs/espm/howto/how-to-understand-risk-root-cause">
    Investigate risk factors affecting an endpoint, review available technical details, and understand the underlying conditions or activities that caused a risk to be detected.
  </Card>

  <Card title="How to assess SOC 2 compliance readiness" icon="workflow" href="/docs/espm/howto/how-to-verify-that-the-system-is-soc-2-compliant">
    Use the SOC 2 Compliance Policy to assess automatable SOC 2 controls, identify non-compliant endpoints, and remediate detected risks to improve overall compliance readiness.
  </Card>
</CardGroup>