Security Analytics

15 entities and 94 agent-callable operations in security_analytics. Each operation is addressed as {mega_tool}/security_analytics/{entity}/{operation} and carries the same permission check over MCP and REST.

`board_report`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new board report
`delete`	`entity_crud`	Delete a board report
`list`	`entity_crud`	List board_reports with filtering and pagination
`read`	`entity_crud`	Get detailed board report information
`search`	`entity_crud`	Search board_reports with fuzzy matching
`update`	`entity_crud`	Update an existing board report

`compliance_calendar_event`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new compliance calendar event
`delete`	`entity_crud`	Delete a compliance calendar event
`list`	`entity_crud`	List compliance_calendar_events with filtering and pagination
`read`	`entity_crud`	Get detailed compliance calendar event information
`search`	`entity_crud`	Search compliance_calendar_events with fuzzy matching
`update`	`entity_crud`	Update an existing compliance calendar event

`compliance_control`

Operation	Mega-tool	What it does
`control_by_category`	`report_query`	Controls broken down by category and status across frameworks.
`control_completion_progress`	`report_query`	Percent of controls in effective state per org/framework (compliance score).
`control_owner_workload`	`report_query`	Controls assigned per owner with status breakdown (workload balancing).
`control_status_summary`	`report_query`	Distribution of compliance control status per framework (SLA heat map).
`create`	`entity_crud`	Create a new compliance control
`delete`	`entity_crud`	Delete a compliance control
`list`	`entity_crud`	List compliance_controls with filtering and pagination
`read`	`entity_crud`	Get detailed compliance control information
`search`	`entity_crud`	Search compliance_controls with fuzzy matching
`update`	`entity_crud`	Update an existing compliance control

`compliance_evidence`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new compliance evidence
`delete`	`entity_crud`	Delete a compliance evidence
`list`	`entity_crud`	List compliance_evidences with filtering and pagination
`read`	`entity_crud`	Get detailed compliance evidence information
`search`	`entity_crud`	Search compliance_evidences with fuzzy matching
`update`	`entity_crud`	Update an existing compliance evidence

`compliance_finding`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new compliance finding (POA&M item)
`delete`	`entity_crud`	Delete a compliance finding
`list`	`entity_crud`	List compliance_findings (POA&M) with filtering and pagination
`read`	`entity_crud`	Get detailed compliance finding information
`search`	`entity_crud`	Search compliance_findings with fuzzy matching
`update`	`entity_crud`	Update an existing compliance finding

`compliance_framework_enrollment`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new compliance framework enrollment
`delete`	`entity_crud`	Delete a compliance framework enrollment
`list`	`entity_crud`	List compliance_framework_enrollments with filtering and pagination
`read`	`entity_crud`	Get detailed compliance framework enrollment information
`search`	`entity_crud`	Search compliance_framework_enrollments with fuzzy matching
`update`	`entity_crud`	Update an existing compliance framework enrollment

`control_effectiveness`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new control effectiveness
`delete`	`entity_crud`	Delete a control effectiveness
`list`	`entity_crud`	List control_effectivenesses with filtering and pagination
`read`	`entity_crud`	Get detailed control effectiveness information
`search`	`entity_crud`	Search control_effectivenesses with fuzzy matching
`update`	`entity_crud`	Update an existing control effectiveness

`dashboard_widget`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new dashboard widget; user defaults to the authenticated user
`delete`	`entity_crud`	Delete a dashboard widget
`list`	`entity_crud`	List dashboard widgets; defaults to the authenticated user's widgets
`read`	`entity_crud`	Get a dashboard widget by ID
`update`	`entity_crud`	Update a dashboard widget's config, position, or visibility

`framework_enrollment`

Operation	Mega-tool	What it does
`enrollment_status_breakdown`	`report_query`	Enrollment counts by status per framework (compliance portfolio view).
`enrollment_timeline`	`report_query`	Enrollment additions per quarter per framework (adoption velocity).
`framework_audit_recency`	`report_query`	Distribution of last-audit-date recency; identifies overdue audits.

`incident_playbook`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new incident playbook
`delete`	`entity_crud`	Delete a incident playbook
`get_transitions`	`workflow_action`	Get available transitions for a incident playbook
`list`	`entity_crud`	List incident_playbooks with filtering and pagination
`read`	`entity_crud`	Get detailed incident playbook information
`search`	`entity_crud`	Search incident_playbooks with fuzzy matching
`transition`	`workflow_action`	Transition incident playbook to a new status
`update`	`entity_crud`	Update an existing incident playbook

`playbook_execution`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Start a new playbook execution for an incident
`delete`	`entity_crud`	Delete a playbook execution
`get_transitions`	`workflow_action`	Get available transitions for a playbook execution
`list`	`entity_crud`	List playbook executions with filtering and pagination
`read`	`entity_crud`	Get a playbook execution with full step results log
`transition`	`workflow_action`	Transition playbook execution to a new status
`update`	`entity_crud`	Update current_step or append a step result entry; status changes use workflow_action

`regulatory_notification`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new regulatory notification
`delete`	`entity_crud`	Delete a regulatory notification
`list`	`entity_crud`	List regulatory_notifications with filtering and pagination
`read`	`entity_crud`	Get detailed regulatory notification information
`search`	`entity_crud`	Search regulatory_notifications with fuzzy matching
`update`	`entity_crud`	Update an existing regulatory notification

`risk_appetite`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new risk appetite
`delete`	`entity_crud`	Delete a risk appetite
`list`	`entity_crud`	List risk_appetites with filtering and pagination
`read`	`entity_crud`	Get detailed risk appetite information
`update`	`entity_crud`	Update an existing risk appetite

`risk_scenario`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new risk scenario
`delete`	`entity_crud`	Delete a risk scenario
`list`	`entity_crud`	List risk_scenarios with filtering and pagination
`read`	`entity_crud`	Get detailed risk scenario information
`scenario_health_by_type`	`report_query`	Draft/active/archived distribution per scenario type (portfolio composition).
`scenario_model_recency`	`report_query`	Distribution of last-calculated dates; model freshness indicator.
`scenario_quantified_risk`	`report_query`	Annualized loss expectancy (mean) aggregated by scenario type and status.
`search`	`entity_crud`	Search risk_scenarios with fuzzy matching
`update`	`entity_crud`	Update an existing risk scenario

`security_posture_snapshot`

Operation	Mega-tool	What it does
`component_breakdown`	`report_query`	Latest snapshot with all 6 sub-scores ranked by contribution to risk (descending score = higher risk).
`list`	`entity_crud`	List security posture snapshots ordered newest-first; filter by date range
`read`	`entity_crud`	Get a security posture snapshot by ID including full metrics
`scorecard_summary`	`report_query`	Latest snapshot scorecard: all 6 component scores plus 7d/30d deltas and direction indicators.
`trend_over_period`	`report_query`	Time-series of all component scores over a date range (daily/weekly/monthly).

Parameter schemas and permission codenames are in the full reference — sign in — or call prism_introspect(dimension="capability_search", query="…") with your key.

In the full reference this application appears under entity_crud, report_query, workflow_action.