332 results found
-
Remove Duplicate Controls Based on Which is More Stringent
MyCSF needs to have a job that runs which ranks the controls on a level of strictness and removes duplicate controls that are less strict when they provide the same coverage. Often times, we see multiple of the same controls (with just a timeframe changed, more requirements than one another, etc.). Removing duplication would help speed up certification.
Ex: 1141.01bCMSSystem.12 - The organization
1. disables accounts of users posing a significant risk immediately, not to exceed 30 minutes after discovery of the risk.11962.01bNYDOHSystem.3 - The organization
1. disables accounts of users posing a significant risk within 60 minutes of…11 votes -
Adding NHS and NIS 2 - EU and UK Requirements to CSF
Adding NHS and NIS 2 - EU and UK Requirements to CSF
2 votes -
formatting text in comment boxes
you should have formatting in the comment section text boxes. so it looks good when the assessment is printed.
2 votes -
Offline for Interim
Can the offline assessment be made available in an interim assessment
4 votes -
Offline Assessment: Confirmation that an upload is occurring and a progress bar
Confirmation that an upload is occurring and a progress bar.
6 votes -
Dark Theme
Would love to see a dark theme for MyCSF. I tend to find myself in MyCSF for extended periods of time and the all-white on my large monitor is blinding.
3 votes -
Revision
Submitting revisions to the draft report was very difficult. I had 3 revisions. The first one was duplicated 3 times instead of saving three separate ones. The second when posted refused to accept the correct section of the report that I had entered; it changed it to a different section of its own accord. I tried it twice, and it did it every time. So instead of 3 revisions, I now have 6, 3 of which are either duplicate or incorrect because of MyCSF. I have no way to delete the incorrect revisions once added. The interface needs to be…
2 votes -
fix the website memory usage, crashes at over 4gig usage during submission to external assessor
Happens specifically on domain 11 without fail but whole site seems to use way more memory than is typical for any modern site.
1 vote -
Formatting for comment sections
the comment boxes should have formatting tools for text so that it can be prettier when the assessment is printed out.
1 vote -
Single Spreadsheet Assessment Report (Column)
Have the option of a report similar to the "Assessment Report (Column)," however, all data on one spreadsheet rather than one for each Domain in the workbook
1 vote -
Expand the Authoritative Resources for Source Mapping to include ENS for Spain
Expand the Authoritative Resources for Source Mapping to include ENS for Spain. AKA: Certification of Conformity with ENS (Esquema Nacional de Seguridad)
1 vote -
Remove delegate but not the scores
If a control has multiple delegates and the scoring is completed by one of the delegates, removing all delegates from that control should not remove the scores that were previously set.
1 vote -
Bulk remove delegates
It would be nice if there was a way to remove delegates from an entire domain without going through each control one by one.
1 vote -
Show maturity when multiple people are delegated to a control but not completed
Currently, If there are multiple people delegated to a control, the entire domain maturity does not appear in the "Domains by Average Maturity " report even if one of the delegates have entered their scores. I feel that the report should show the maturity in its current state to give a more accurate picture of all domains so that decisions can be made for additional worked needed to be performed. For example, I have 2 people deleted to a control. Delegate #1 enters values of policy 100%, procedure 0%, implementation 100%, measure 75%, manage 0% and delegate #2 is working…
1 vote -
6 votes
-
Make the help site more apparent
The https://help.mycsf.net/ page should be front end center in the 'Need Help?' box on the side of the portal and/or a menu item at the top.
1 vote -
Offline for Interim
Offline assessment for Interim
1 vote -
Can we get access to the Offline assessment for the interim assessments
Can we get access to the Offline assessment for the interim assessments
1 vote -
Save and Submit at the control level vs. domain level
Often we send back a control to a client for them to add evidence. When they are done, the status turns to Response Complete but we cannot edit that control until they send the entire domain back. Is it possible to have a button next to the SAVE (see below) for the client to SAVE & SUBMIT and just submit that control back to us instead of the entire domain?
I think it might be more efficient for our clients to be able to submit the control back right in the control screen vs. having to go back to the…
1 vote -
in document descriptions when entering docs into Hitrust it is fine if you link to a document already uploaded but you should be able to add
you should be able to add individual description in different sections of CSF to a document that already exist... as the same document may address different controls.. having to use the same description can be confusing... descriptions for a document should be able to be different in different sections of MYCSF
1 vote
- Don't see your idea?