340 results found
-
Cross-organization notifications display names of other clients when looking at MyCSF
Assessor view - when looking at Client ABC's homepage, notifications from Client XYZ appear on the page. To avoid potential confidentiality issues (when screen-sharing, for instance), would recommend removing notifications from organizations other than the one currently selected
3 votes -
Suggested User Guide links do not lead to correct page
When the "need help?" popup shows up and suggests related pages from the MyCSF User Guide, the links just go to the User Guide landing page rather than the specific page that addresses the question.
2 votes -
System Documentation Definition
Define System Documentation in the Glossary of Terms
1 vote -
Need to be able to Designate to Others within the offline assessment and be able to import it into MyCSF.
The Offline Assessment spreadsheet needs a column for "Designate to Others" and to be able to import it back into MyCSF without emailing the user.
1 vote -
Unable to save the progress
Unable to save the progress after uploading the documents. The Response Status: External assessor review pending. Please link evidence to the implemented level
2 votes -
Add Assessment Date
Please add a Date column to the assessment list.
7 votes -
Apply all button when uploading evidence
When uploading similar evidence to different controls you are presented with 3 options:
"replace this document", "Link to the existing document", & "skip this document"
It would be nice if there was an apply all option that you could click if you plan to link to existing documents for everything you are uploading as opposed to having to click that button 10+ times.
3 votes -
Add DNV to Mapping
Add DNV mapping.
4 votes -
Evaluative Elements Report
Create a report that shows a list of the Evaluative Elements for each requirement statement similar to the Illustrative Procedures report - this will help both assessors and assessed entities with ensuring that they are meeting the EEs when working in offline testing workbooks without clicking into each requirement statement within MyCSF.
15 votes -
External assesors reporting
Grant the ability for external assessors to generate and use reports for their demo environment. This will allow to identify different applicable requirements based on changes on specific factor information.
1 vote -
Include the HITRUST requirement ID in the Reports
Please re-configure the Reports under Analytics to ensure that Requirement ID is part of the data pull. We manage this work at a requirement level and currently, every report that we run we have to do a cross-reference to pull in the requirement ID.
26 votes -
Marking a Control Automatically Complete Prematurely
The control should not be marked as completed until there is 1) N/A marked 2) 100% inheritance marked or 3) where the control is applicable (partially or in whole) AND inheritance is 0-75%, linked documents applied with subscriber comments.
Controls are being marked completed (automatically by the system) when Inheritance is applied, even if the inheritance is less that 100%. The subscriber still needs to add their control testing for their portion of the control. The control should be deemed incomplete until they have linked documents and subscriber comments. Otherwise the status wheel is an inaccurate representation of the status…
1 vote -
Unable to save the progress.
Unable to save the progress after uploading the documents.
3 votes -
Email Notification Configuration Options
Ability to configure email communications from myCSF to tailor emails such as inheritance requests. More granular notifications and email subjects / recipients for the emails is desired.
1 vote -
Validated Report Agreement for CAPs
After the validated report agreement is signed by subscriber please allow for the green check mark to be generated. Subscriber should not have to wait for HITRUST to countersign the validated report agreement for a green checkmark to be generated. This delays the ability to generate caps.
4 votes -
Remove the headings for each domain on a combined AssessmentReportColumn report
Within the AssessmentReportColumn report (exported to excel), remove the headings for each domain when you set "Split Assessment Domains into Separate Sheets?" as no. Instead of having headings over each domain section, add the domain as another cell within each row. This will remove the need for manual formatting to be able to run formulas, etc.
2 votes -
New User Support Access Role
Create another access role - "User Support" that grants view all access with the ability to upload documentation and scoring (without delegation rights). Preferably with the option to track who updated scoring.
2 votes -
Authoritative sources -Standards and Frameworks
When will the authoritative sources be updated to the most current versions, i.e.: CMM 3.0 to 4.0x, ISO 27001- 2013 to 2022?
1 vote -
Not able to download Offline Assessment
I am not able to download Offline Assessment
I need this to save my assessment on a higher priority.
1 vote -
Add checkblock for evaluative element completion
break out the evaluative elements with a checkblock for completion. Also, add the ability for evaluative elements to be assigned to different users.
4 votes
.png){kind=link}
- Don't see your idea?