Home
Reports
Compliance reports
Compliance reports consist of the Regulatory Compliance reports and the Industry Standards reports. The regulatory compliance reports let you know if your application complies with specific regulations or legal standards. The industry standards reports let you know if your application complies with standards of a selected industry committee.
Creating compliance reports
You can create Regulatory compliance, Industry standards, or user-defined reports from the Compliance tab of the Create report dialog.

Welcome
Welcome to the documentation for HCL AppScan Standard version 10.8.0
Getting started
This section provides a short tour of basic product features and procedures, including using the wizard to set up a scan.
Configuration
You configure a scan by choosing settings that best describe your application, and the kind of testing you want.
Manual exploring
Manual exploring enables you to explore specific parts of your application, filling in fields and forms as you go. This can be a way of ensuring that particular areas of the site are covered, and that AppScan has the information needed to complete forms correctly.
Scanning
Learn how to start a scan, and what happens during the scan; how to manually manipulate the Explore stage, and how to export the results of a scan.
Data
Data view is populated with information about the structure of the site during the Explore stage of the scan.
Issues
Issues view provides access to the results of a scan. You can view results at a high level or select specific tests or objects and access more details. These details include how to fix, requests/responses, and differences between the test variants that resulted in issues. You can manipulate the severity of issues, resend tests (with or without modifications), and create reports based on Issues.
Reports
- Customizing the report layout
  Using the Customize report layout option of the Create report dialog box, you can customize the appearance of your reports. This feature is optional, as you can simply generate reports using the default layouts.
- Viewing and saving reports
  Reports can be generated, viewed, and saved in various formats.
- Creating partial reports
  You can create a Security Report or a Template-Based Report for a subset of the scan results by right-clicking on the URL or folder for which you want to create the report.
- Earlier versions of report templates
  Earlier versions of some Industry Standard and Regulatory Compliance templates are saved in the "Old Versions" folder.
- Security reports
  The Security report provides information about security issues discovered, and you can choose from a variety of templates depending on the type of content you need.
- Compliance reports
  Compliance reports consist of the Regulatory Compliance reports and the Industry Standards reports. The regulatory compliance reports let you know if your application complies with specific regulations or legal standards. The industry standards reports let you know if your application complies with standards of a selected industry committee.
  - Creating compliance reports
    You can create Regulatory compliance, Industry standards, or user-defined reports from the Compliance tab of the Create report dialog.
  - Supported versions
    A list of Regulations and Industry Standards and their supported versions.
  - User-defined reports
    You can create user-defined templates for either the Industry Standards or Regulatory Compliance reports.
- Delta Analysis reports
  The Delta Analysis report compares two sets of scan results and shows the difference in URLs and/or security issues that were discovered in them.
- Template-based reports
  The Template-based tab of the Create report dialog box enables you to create reports in Microsoft® Word DOC and DOCX formats, with exactly the data you want, and the document formatting you define.
Tools
This section explains how to use additional tools provided with HCL AppScan Standard.
Integrations
This section describes integrations of other applications with AppScan Standard:
Best practices
This section contains some best practices and use cases for advanced users.
FAQ & Troubleshooting
CLI
This section describes the syntax and options available using the Command line interface.
References
Menus and toolbar summaries, and glossary

Creating compliance reports

You can create Regulatory compliance, Industry standards, or user-defined reports from the Compliance tab of the Create report dialog.

About this task

The list of templates to choose from is updated by HCL as new regulations and standards are created for different industries or legal standards and is updated automatically on a regular basis.

If you do not find the regulation or the industry standard that you need in the list, you can create your own Regulatory Compliance or Industry Standard report template. For more information, see User-defined reports.

The Compliance reports include the following sections:


Section Title	Information Presented
Description	Explanation of the regulation or the standard.
Compliance Summary	List and count of non-compliance issues. Note that a single issue may indicate non-compliance of more than one section, and therefore the number of issues per section, for all the sections, may be more than the number of unique issues.
Unique Compliance Issues	List of non-compliant URLs, relevant parameters or cookies, and test names. Each issue appears once only.
Compliance Issues by Section	Detailed explanations of how your application is non-compliant, with remediation to address issues.

Table 1. Sample compliance reports
Sample from a Regulatory Compliance Report	Sample of part of an Industry Standard Report

Procedure

Once the scan is complete, from the Dashboard, Data, or Issues view, click Create report > Compliance.
Do one of the following:
- Select one of the listed Regulatory compliance template.
- Select one of the listed Industry standard template.
- Select the User Defined radio button and enter or browse to a custom Industry Standard template file (*.asreg). See User-defined reports for details.
If you want to change how the report looks, click the Customize report layout link at the top-right. For more information, see Customizing the report layout.
To save the report to a file, click Create, type in a name for the report, and select a Format: PDF (Adobe® Acrobat Reader), HTML (web browser), RTF (Microsoft® Word), or TXT (text editor) and then click Save.
AppScan displays a status bar to show the progress of report creation.
Click Open report to view the report.
The report opens in a new tab for viewing.