43 results found
-
formatting text in comment boxes
you should have formatting in the comment section text boxes. so it looks good when the assessment is printed.
2 votes -
Formatting for comment sections
the comment boxes should have formatting tools for text so that it can be prettier when the assessment is printed out.
1 vote -
Save and Submit at the control level vs. domain level
Often we send back a control to a client for them to add evidence. When they are done, the status turns to Response Complete but we cannot edit that control until they send the entire domain back. Is it possible to have a button next to the SAVE (see below) for the client to SAVE & SUBMIT and just submit that control back to us instead of the entire domain?
I think it might be more efficient for our clients to be able to submit the control back right in the control screen vs. having to go back to the…
2 votes -
Unable to save the progress
Unable to save the progress after uploading the documents. The Response Status: External assessor review pending. Please link evidence to the implemented level
2 votes -
Unable to save the progress.
Unable to save the progress after uploading the documents.
3 votes -
1 vote
-
Automate the validated report agreement countersignature from HITRUST
Please automate the countersignature from HITRUST of the validated report agreement, subscriber should not have to wait 48 hours or more for this to be countersigned.
1 vote -
Add checkblock for evaluative element completion
break out the evaluative elements with a checkblock for completion. Also, add the ability for evaluative elements to be assigned to different users.
4 votes -
Add "Implemented: Sampling" flag to controls in MyCSF where they are missing
Upon review of sample testing required for a v9.5 assessment, I noticed that quite a few controls have illustrative procedures that state "select a sample of . . .", however when you look in MyCSF the control requirement, they don't have the "Implemented: Sampling" flag. Is there a plan to ensure the flag is evident for all control requirements in MyCSF that require sample testing per IP?
5 votes -
Post Submission QA Tasks
It would be helpful to partially unlock the specific items/areas that QA has assigned tasks to post submission. Currently, we have to request help from the support team and it prolongs the process of QA unnecessarily.
2 votes -
Allow submission of assessments prior to renewal date without changing annual renewal date
Currently, if we want to maintain our annual reassessment date, we need to submit our assessment on that specific date (i.e., we cannot submit an assessment earlier if it is ready). We should be able to submit at any point and mark the date of the submission, or simply keep the annual assessment date unless a different date is requested.
10 votes -
5 votes
-
Electronic Signature for Auditors
For timesheets and QA Sheets - it would be best to have this done electronically. Especially since we are remote - it's easier to have Executive and QA use the same document and electronically sign/initial.
4 votes -
Review sign off
Add a checkbox or field for external reviewers to sign off on requirement statement after they have reviewed them.
1 vote -
Rep Letter Upload Requirement
Remove edit check that requires client to upload a rep letter in order to submit a domain to the assessor. This is too early in the process to provide a rep letter - currently, clients must upload a fake / placeholder document as a workaround.
4 votes -
assessor agree
for N/A requirements, change to a single "agree with N/A"
8 votes -
Introduce the notion of CHQP (Assessor firm internal QA) start and end times
There are times when the addition of assessor team quality review pushes past the 90-day window. We get backlogged the same way you do. We always adhere to the 90-day window for accepting and reviewing evidence, and we can demonstrate that reasonably. But it would be helpful if there was some flexibility around the submission date. If we plug in the real dates of assessment, and then submit 91 days after we started testing, the system errors due to >90.
Introducing the notion of the defined assessment window of 90 days, and the CHQP review period (stated dates) might help…
3 votes -
Add Multi-Select of Requirements for Delegating Responsibilities
There needs to be a half-way point between the requirement statement and domain level for delegating responsibilities. It would be nice to have the ability to select multiple requirement statements within a domain and then delegate those statements rather than completing each one individually.
3 votes -
Delegation Percentage indicator
delegation percentage graph
1 vote -
Show internal assessor scoring
show indication of who entered customer scoring- customer or internal assessor
1 vote
- Don't see your idea?