313 results found
-
Enumerate policy statements and required areas for illustrative procedures
Specifically enumerate all required policy statements and items for each requirement at the policy and procedure level as a checklist. Hiding specific requirements inside the repetitive narrative of the illustrative procedures makes it extremely difficult to parse-out what is required in policy and procedure documentation. While you're at it, remove the repetitive language all together since it's obvious for each control that "ad hoc or well understood blah blah" is already partially acceptable by your rubric and focus on giving more examples of acceptable language or implementations or links to relevant information.
18 votes -
Autogenerated FedRAMP Low, Medium, and High templates
Capability that allows a user to generate a FedRAMP Low, Moderate, and High templates directly from MyCSF given the Assessment selected the FedRAMP Regulatory Option (v9.4 support)
0 votes -
Autogenerated MARS-E SSP template
Capability that allows a user to generate a MARS-E SSP template directly from MyCSF given the Assessment selected the MARS-E Regulatory Option (v9.4 support)
0 votes -
Add Multi-Select of Requirements for Delegating Responsibilities
There needs to be a half-way point between the requirement statement and domain level for delegating responsibilities. It would be nice to have the ability to select multiple requirement statements within a domain and then delegate those statements rather than completing each one individually.
3 votes -
Column Option for Illustrative Procedures Report
Reporting
Please allow for a column option for the Illustrative Procedures Report. Much like the Assessment Report (Column).8 votes -
APEC CBPRS and PRPS regulatory factors/reports
Allow for targeting assessments against APEC programs
1 vote -
Removing the lower level nested Requirement Statements from an assessment
When you have a level 3 Requirement statement, can the level 1 and level 2 requirement statement for that same control be removed from the assessment? This would remove redundancy, by not having to ask the business for evidence at each level because it would be inclusive in the level 3. This would also lower the number of overall baselines while still covering the control.
13 votes -
Display Message within the tool informing clients of bugs/patches or issues to be proactive and better inform
When issues or bugs happen, it would be helpful to notify clients via notification or Red Flag Message in the tool to inform them. This would show the informed and proactive communication from HITRUST to the Clients to improve their experience within the MyCSF tool.
5 votes -
Save and Close on Document Modal
Please provide an option to both Save and Close the window when linking documents to a requirement statement. Right now, this takes 2 clicks. We have to save the document links before we can close... then we have to close to get back out to the requirement statement to complete our scoring. It's a lot of clicking already to link all the documents. Please take one click away. Thank you!
5 votes -
Custom API Endpoints
Allow a User to choose the Data points that they want returned in an API Call. MyCSF would then automatically develop an API path that returns the hand-picked dataset
4 votes -
Delegation Percentage indicator
delegation percentage graph
1 vote -
Show internal assessor scoring
show indication of who entered customer scoring- customer or internal assessor
1 vote -
Please create a report of an assessment's requirement statements that have no documents linked to it.
Please create a report feature to generate 'completed' requirement statements have have no documentation linked. This will help the internal assessor send out follow up emails to ensure the assessment is ready for the external assessor to review.
1 vote -
When no documentation has been added, please add an alert saying 'no documentation has been linked, are you sure you want to proceed?"
Please create a warning alert or prevention function that requires the statement owner to upload the appropriate supporting documentation.
1 vote -
Update subscriber information field to include countdown
Put a countdown timer on the expiration date of an account.
2 votes -
Assign CAP to User
Allow a CAP be assignable to a User in an Organization. This wouldn't permit them to add new CAPs or link to Statements, but would allow them to modify the fields of CAPs they're assigned.
9 votes -
Diary Notifications and Indicators
Add notifications when new diary entries are posted to an item that I haven't yet read. It would be great if this was visible at the domain and requirement statement level. It should be user specific - so once I read an entry, it turns the "New" notification off. This way I know when a subscriber leaves me a note or question, and they know when I leave a reply. I also upvoted the tagging option in diaries as this would be be a similar feature, but only if I can tell the difference between items I've read and haven't…
7 votes -
UI to assign inheritance for multiple task items at one time.
Currently to assign Internal/External inheritance, a user has to select each task item and assign individually.
Please consider a UI to assign inheritance for multiple task items at one time, making it easier and more efficient for end users to complete in a more respectable time and manner.2 votes -
Ability to sort documents list
The general documents view should allow the user to sort the documents by date uploaded, by document title, and by document description.
19 votes -
Organizational info cleanup
The ability to edit and delete information for systems and facilities including the ability to removing them from "other" in order to keep organizational information clean.
3 votes
- Don't see your idea?