335 results found
-
Remove Duplicate Controls Based on Which is More Stringent
MyCSF needs to have a job that runs which ranks the controls on a level of strictness and removes duplicate controls that are less strict when they provide the same coverage. Often times, we see multiple of the same controls (with just a timeframe changed, more requirements than one another, etc.). Removing duplication would help speed up certification.
Ex: 1141.01bCMSSystem.12 - The organization
1. disables accounts of users posing a significant risk immediately, not to exceed 30 minutes after discovery of the risk.11962.01bNYDOHSystem.3 - The organization
1. disables accounts of users posing a significant risk within 60 minutes of…12 votes -
Dark Theme
Would love to see a dark theme for MyCSF. I tend to find myself in MyCSF for extended periods of time and the all-white on my large monitor is blinding.
6 votes -
Offline Assessment: Confirmation that an upload is occurring and a progress bar
Confirmation that an upload is occurring and a progress bar.
8 votes -
Rapid Reassessment
Allow for the audit to be completed before forcing a warning each and every time a control is updated.
The warning is:
Control Degredation
This i1 Rapid Assessment contains 15 Requirement Statements with scores lower than the previous i1 Validated Assessment. This exceeds the amount of degredation allowed to continue with the i1 Rapid Assessment. This i1 Rapid Assessment must be converted to a full i1 Validated Assessment.
We are not done with the assessment. Even if we chose to default score at 100%, there are controls that require work and need to be worked as such. To have this…
1 vote -
Adding NHS and NIS 2 - EU and UK Requirements to CSF
Adding NHS and NIS 2 - EU and UK Requirements to CSF
2 votes -
fix the website memory usage, crashes at over 4gig usage during submission to external assessor
Happens specifically on domain 11 without fail but whole site seems to use way more memory than is typical for any modern site.
2 votes -
formatting text in comment boxes
you should have formatting in the comment section text boxes. so it looks good when the assessment is printed.
2 votes -
Offline for Interim
Can the offline assessment be made available in an interim assessment
4 votes -
Revision
Submitting revisions to the draft report was very difficult. I had 3 revisions. The first one was duplicated 3 times instead of saving three separate ones. The second when posted refused to accept the correct section of the report that I had entered; it changed it to a different section of its own accord. I tried it twice, and it did it every time. So instead of 3 revisions, I now have 6, 3 of which are either duplicate or incorrect because of MyCSF. I have no way to delete the incorrect revisions once added. The interface needs to be…
3 votes -
Allow "Validated Report Agreement" document process to be restarted (because of missing or wrong information)
Allow "Validated Report Agreement" document process to be restarted (because of missing or wrong information). Once executed the forma reports: "Validated Report Agreement
This agreement has already been sent for signing."1 vote -
Scope of the Assessment Completeness
The auditor should not be able to move on/thumbs up the scope of the assessment of not all the required fields are completed. Often the, description of the Services within the forms are left off. This becomes a QA Task. In order to prevent this QA task, make is so that the auditor cannot thumbs up the page if it is not completed.
1 vote -
Formatting for comment sections
the comment boxes should have formatting tools for text so that it can be prettier when the assessment is printed out.
1 vote -
Single Spreadsheet Assessment Report (Column)
Have the option of a report similar to the "Assessment Report (Column)," however, all data on one spreadsheet rather than one for each Domain in the workbook
1 vote -
Save and Submit at the control level vs. domain level
Often we send back a control to a client for them to add evidence. When they are done, the status turns to Response Complete but we cannot edit that control until they send the entire domain back. Is it possible to have a button next to the SAVE (see below) for the client to SAVE & SUBMIT and just submit that control back to us instead of the entire domain?
I think it might be more efficient for our clients to be able to submit the control back right in the control screen vs. having to go back to the…
2 votes -
Expand the Authoritative Resources for Source Mapping to include ENS for Spain
Expand the Authoritative Resources for Source Mapping to include ENS for Spain. AKA: Certification of Conformity with ENS (Esquema Nacional de Seguridad)
1 vote -
Remove delegate but not the scores
If a control has multiple delegates and the scoring is completed by one of the delegates, removing all delegates from that control should not remove the scores that were previously set.
1 vote -
Bulk remove delegates
It would be nice if there was a way to remove delegates from an entire domain without going through each control one by one.
1 vote -
Show maturity when multiple people are delegated to a control but not completed
Currently, If there are multiple people delegated to a control, the entire domain maturity does not appear in the "Domains by Average Maturity " report even if one of the delegates have entered their scores. I feel that the report should show the maturity in its current state to give a more accurate picture of all domains so that decisions can be made for additional worked needed to be performed. For example, I have 2 people deleted to a control. Delegate #1 enters values of policy 100%, procedure 0%, implementation 100%, measure 75%, manage 0% and delegate #2 is working…
1 vote -
6 votes
-
Make the help site more apparent
The https://help.mycsf.net/ page should be front end center in the 'Need Help?' box on the side of the portal and/or a menu item at the top.
1 vote
- Don't see your idea?