MyCSF

JUMP TO ANOTHER FORUM

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. When creating a new assessment object AFTER already having been certified (i.e., in a re-certification scenario), MyCSF should have an option to include or NOT include the documentation linkages present in the previous assessment object.

    18 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  2. An option to configure an assessment's documentation (workpapers, audit evidence) to reside in the client's cloud hosting provider instead of in MyCSF's default storage location, such as:
    - Client's box.com
    - Client's S3 bucket
    - Client's Google drive
    - Client's SharePoint

    This would require the client to grant the MyCSF application access into a specific area in their cloud environment. This would be very beneficial to customers who don't want to allow assessment documentation to leave their controlled environments.

    This would also require MyCSF to store assessment documentation in a folder structure that can be navigated with something like Windows…

    31 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  3. In the MyCSF evidence "folder" list view, it'd be very handy to sort by upload date.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  4. One of the most time consuming tasks in performing assessments is the linkage of documentation. I think it would be helpful if our documentation repository creates a slot for each document. The slot is then mapped in a one to many relationship model to control requirements. The documents are then uploaded to the virtual slot. The big advantage is that documents in the slots can be automatically mapped to any assessment object and if the most recently reviewed version of a policy is uploaded to the slot to replace the old version, the new one automatically mapped as well. This…

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  5. MyCSF should allow users to perform a keyword search throughout all attached documents. While this obviously wont search screenshots and non-OCR'd PDFs, the ability to do a mass search of all uploaded documents in one run would be valuable.

    16 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  6. Like in 1.0 click a document that is associated and bring up the information related to it.
    Document Preview without Downloading would be niceThis reader should be view-only (no edits)… in a future version we’d like edit capability (e.g. to allow annotations such as textboxes… if we can even get a read-only viewer for the time being that would be a big win)
    Allows a document to be viewed in the browser and optionally downloaded
    Maybe mimic the O365 outlook model or Google Drive model of handling files?
    only supports these file types:
    PICTURES: jpg png bmp tiff jpeg
    PORTABLE…

    17 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    Proposed  ·  1 comment  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  7. If a document was identified as associated with a requirement statement or requirement statement's PRISMA attribute(s), the assessor should be given an easy way to flag items as irrelevant to the PRISMA attribute and to the requirement statement. Its common for the customer to link files that may be related to other requirements but not necessarily to the requirement statement at hand.

    14 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  8. Please provide an option to both Save and Close the window when linking documents to a requirement statement. Right now, this takes 2 clicks. We have to save the document links before we can close... then we have to close to get back out to the requirement statement to complete our scoring. It's a lot of clicking already to link all the documents. Please take one click away. Thank you!

    5 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  9. Adding Documents to each control, there is not a way to search for the document, except by name. There needs to be a listing like a . function to pull up your list to choose.

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  10. When doing a bulk upload of documents (screenshots, workpapers, etc.) via a compressed zip archive using the bulk upload functionality, users should be able to automatically associate documents with requirement statements and PRISMA levels (e.g., policy) using a defined folder structure within the archive.

    The folder structure can be something like this:

    -- domain
    --- requirement statement ID
    ---- policy
    ---- process
    ---- implemented
    ---- measured
    ---- managed

    Documents present in these folders would be (a) uploaded, (b) associated with the requirement statement, and (c) tagged to the PRISMA levels

    8 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  11. 6 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  12. The general documents view should allow the user to sort the documents by date uploaded, by document title, and by document description.

    5 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  13. The document replace functionality should also replace document's name (not just document's contents). Right now it appears to replace the document contents but leaves the old document name.

    7 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  14. Unlock Doc Repository when any Task are created during QA

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    Planned  ·  0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  15. Capability for Assessors to solicit their Clients to upload evidence into MyCSF for a given Statement.

    6 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  16. When downloading workpapers / documents, MyCSF currently erases the file metadata. For example, when downloading a file the "date created" field gets overwritten to the date the file was downloaded from MyCSF. MyCSF should not mess with any document's metadata at all. I'd like to be able to see the original date created as well as all of the other original metadata associated with the file.

    6 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  17. MyCSF should support common file handling protocols to manage assessment documentation. This should operate similar to how Web applications such as media servers (Plex, Ombi) and online document repositories (livelink, sharepoint) work... these allow the upload and accessing of files using a alternate protocols such as SAMBA, SCP, and SFTP. Any file and folder changes made using supported protocols are reflected in the Web application front-ends. MyCSF should function in a similar fashion.

    If this existed, users wouldn't have to upload each and every file using our Web front-end nor would they have to manually associate each artifact to the…

    4 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  18. Enable the Org Overview Scope as well as the Participation Agreement for the client roles of the Assessment.

    4 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  19. In the workpaper upload screen (accessible via Actions > Add Related Document), add a note to the red information box to remind assessors that all uploaded evidence should contain electronic markup per the HITRUST CSF Assurance Program Documentation Requirements communicated in CSF Assurance bulletin HAA 2019-001.

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
  20. Please create a warning alert or prevention function that requires the statement owner to upload the appropriate supporting documentation.

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Documents & Evidence  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1
  • Don't see your idea?