316 results found
-
Offline for Interim
Can the offline assessment be made available in an interim assessment
4 votes -
Remove Duplicate Controls Based on Which is More Stringent
MyCSF needs to have a job that runs which ranks the controls on a level of strictness and removes duplicate controls that are less strict when they provide the same coverage. Often times, we see multiple of the same controls (with just a timeframe changed, more requirements than one another, etc.). Removing duplication would help speed up certification.
Ex: 1141.01bCMSSystem.12 - The organization
1. disables accounts of users posing a significant risk immediately, not to exceed 30 minutes after discovery of the risk.11962.01bNYDOHSystem.3 - The organization
1. disables accounts of users posing a significant risk within 60 minutes of…8 votes -
Offline Assessment: Confirmation that an upload is occurring and a progress bar
Confirmation that an upload is occurring and a progress bar.
6 votes -
Dark Theme
Would love to see a dark theme for MyCSF. I tend to find myself in MyCSF for extended periods of time and the all-white on my large monitor is blinding.
3 votes -
Revision
Submitting revisions to the draft report was very difficult. I had 3 revisions. The first one was duplicated 3 times instead of saving three separate ones. The second when posted refused to accept the correct section of the report that I had entered; it changed it to a different section of its own accord. I tried it twice, and it did it every time. So instead of 3 revisions, I now have 6, 3 of which are either duplicate or incorrect because of MyCSF. I have no way to delete the incorrect revisions once added. The interface needs to be…
2 votes -
6 votes
-
Allow us to download v.9.6
We see 9.6 in the dropdown box but I cannot select it.
2 votes -
QA and Support Work together
It would be helpful for Tasks to come back in a state that can be edited. Most of the time the QA sends something back that needs edited, and the Control is locked. When you attempt to get with support to help you fix it, it is a prolonged process with a lot of back and forths and delayed responses. QA and Support need to work together if the tasks are going to come back where Support needs to be engaged.
3 votes -
Scope of the Assessment - Description on Access
Description of how the Systems are Accessed by all parties should be a separate column and not embedded in the Description portion. It is not intuitive that Access is part of the Description. Access is a separate attribute and should be treated as such.
2 votes -
Glitch: When updating score dropdown, if Save is clicked just after, the score is not preserved
Glitch: When updating score dropdown, if Save is clicked just after, the score is not preserved
3 votes -
GAP Report
When generating a GAP report those controls that are associated with a CAP should be identified in the report as CAP required not just as a GAP.
11 votes -
Add Illustrative Procedures to the Assessment Report (Column)
Add CVID & Illustrative Procedures to the Assessment Report (Column)
7 votes -
Include Inheritance reports in the Analytics tab.
It would be beneficial to include the ability to export a list of all inheritance and their associated properties for an object to a CSV/Excel document from the Analytics report tab.
3 votes -
Pre-Populate Information in Assessor Timesheet
Populate the Engagement Executive & CHQP on the Assessor Timesheet based on what is entered on Name & Security page. Additionally, have a dropdown for names of assessors and auto-populate CCSFP numbers when selected.
3 votes -
Business Associate Domain 19
Can there be an additional risk factor question for business associates that asks whether they have any responsibility for handling ePHI/PHI requests from end users/consumers (e.g. disclosures, restrictions in writing)?
Domain 19 has many requirements that are focused on covered entities, and if a BA can confirm they would never be involved in the handling of ePHI requests from end users/consumers I think it would remove several requirements that wind up being N/A and would provide clarity during QA.
5 votes -
HITRUST QA Tasks for External Assessor
It would be helpful to be able to export to excel HITRUST QA tasks with the Assessment Task pop-up details, including the full text of the latest HITRUST Comment and corresponding BUID for the control.
4 votes -
Cross-organization notifications display names of other clients when looking at MyCSF
Assessor view - when looking at Client ABC's homepage, notifications from Client XYZ appear on the page. To avoid potential confidentiality issues (when screen-sharing, for instance), would recommend removing notifications from organizations other than the one currently selected
3 votes -
Suggested User Guide links do not lead to correct page
When the "need help?" popup shows up and suggests related pages from the MyCSF User Guide, the links just go to the User Guide landing page rather than the specific page that addresses the question.
2 votes -
System Documentation Definition
Define System Documentation in the Glossary of Terms
1 vote -
Need to be able to Designate to Others within the offline assessment and be able to import it into MyCSF.
The Offline Assessment spreadsheet needs a column for "Designate to Others" and to be able to import it back into MyCSF without emailing the user.
1 vote
- Don't see your idea?