Skip to main content
The Tasks page is your prioritized action list for improving your security posture. Every open task represents something concrete you can do right now — implementing a control that hasn’t been started, or uploading evidence that a control is missing. Completing tasks is how your risk score goes up.

How tasks are generated

SecurAtlas generates tasks automatically based on the state of your control library. A task is created for each of the following situations:
  • Control not started — a control required by your baseline profile has a status of not_started
  • Control missing evidence — a control is implemented or in progress but has no evidence linked to it
Tasks are not created manually. They appear and disappear as the state of your controls and evidence changes.

Task tiers

Tasks are divided into two tiers based on urgency:

Required by profile

These controls are mandated by your baseline security profile. They must be implemented to meet your compliance program’s minimum requirements. Required tasks are listed first and highlighted.

Recommended

These controls are not strictly required by your profile but will meaningfully improve your security posture and risk score. They are listed after required tasks.
Within each tier, tasks are sorted by:
  1. Urgency tier — most urgent first
  2. Severity — higher severity controls appear before lower ones
  3. Priority — controls flagged as higher priority appear before others

Reading a task entry

Each task shows:
  • Control key — the unique identifier (for example, SUC-07)
  • Severity badge — Critical (5), High (4), Medium (3), or Low (2)
  • Required / Recommended badge — whether this control is required by your profile
  • Effort level — Quick win (low effort), Moderate effort, or High effort
  • Task label — a plain-language description of what needs to be done
  • Category — the security domain this control belongs to
Look for tasks marked Quick win when you want to make fast progress. Low-effort controls with high severity are the highest-return actions in your queue — they improve your score disproportionately for the work involved.

Completing a task

Clicking Implement or Start on a task takes you to the Controls page, where you can update the control’s status, set its maturity level, and link evidence.
1

Implement the control

On the Controls page, open the control and change its status to In progress or Implemented. This alone improves your risk score.
2

Upload or link evidence

Attach documentation that proves the control is in place. Without evidence, the control’s effective maturity stays low and its contribution to your score is limited.
3

Get evidence validated

An owner or admin needs to accept the evidence. Once validated, the control’s effective maturity updates and your risk score recalculates automatically.
Once a control is implemented with validated evidence, it moves to the Complete section at the bottom of the Tasks page and is no longer shown as an open task.

Stats bar

Four tiles at the top of the Tasks page show:
  • Open tasks — total open (required + recommended), shown in amber if any exist
  • Required — tasks in the required tier, shown in red if any remain
  • Recommended — tasks in the recommended tier
  • Complete — controls that are implemented with validated evidence

Connection to the dashboard

The dashboard’s Needs attention widget mirrors the most critical items from your task queue — not-started controls and controls missing evidence. The open task count badge in the dashboard header links directly to this page.
If your baseline assessment has not been completed, task prioritization is limited. Complete the baseline from Setup → Baseline to get accurate urgency tiers and severity scores.