342 results found
-
Show maturity when multiple people are delegated to a control but not completed
Currently, If there are multiple people delegated to a control, the entire domain maturity does not appear in the "Domains by Average Maturity " report even if one of the delegates have entered their scores. I feel that the report should show the maturity in its current state to give a more accurate picture of all domains so that decisions can be made for additional worked needed to be performed. For example, I have 2 people deleted to a control. Delegate #1 enters values of policy 100%, procedure 0%, implementation 100%, measure 75%, manage 0% and delegate #2 is working…
1 vote -
Revision
Submitting revisions to the draft report was very difficult. I had 3 revisions. The first one was duplicated 3 times instead of saving three separate ones. The second when posted refused to accept the correct section of the report that I had entered; it changed it to a different section of its own accord. I tried it twice, and it did it every time. So instead of 3 revisions, I now have 6, 3 of which are either duplicate or incorrect because of MyCSF. I have no way to delete the incorrect revisions once added. The interface needs to be…
3 votes -
Make the help site more apparent
The https://help.mycsf.net/ page should be front end center in the 'Need Help?' box on the side of the portal and/or a menu item at the top.
1 vote -
Dark Theme
Would love to see a dark theme for MyCSF. I tend to find myself in MyCSF for extended periods of time and the all-white on my large monitor is blinding.
11 votes -
Offline for Interim
Offline assessment for Interim
2 votes -
Offline for Interim
Can the offline assessment be made available in an interim assessment
6 votes -
Can we get access to the Offline assessment for the interim assessments
Can we get access to the Offline assessment for the interim assessments
2 votes -
Save and Submit at the control level vs. domain level
Often we send back a control to a client for them to add evidence. When they are done, the status turns to Response Complete but we cannot edit that control until they send the entire domain back. Is it possible to have a button next to the SAVE (see below) for the client to SAVE & SUBMIT and just submit that control back to us instead of the entire domain?
I think it might be more efficient for our clients to be able to submit the control back right in the control screen vs. having to go back to the…
3 votes -
in document descriptions when entering docs into Hitrust it is fine if you link to a document already uploaded but you should be able to add
you should be able to add individual description in different sections of CSF to a document that already exist... as the same document may address different controls.. having to use the same description can be confusing... descriptions for a document should be able to be different in different sections of MYCSF
1 vote -
Policies and Procedures Template per CSF version
Build a Template Policy and Procedure Set for each MyCSF version. Everyone is wasting time and often misaligned when building policies, procedures, standards, guidelines, and plans to comply with HITRUST. I (and I'm sure others) would value HITRUST creating a compliant set of Policies and Procedures that we can implement with minor changes. Either build in a reference section to each document (that shows the MyCSF control it is addressing) or provide a master index, liked HITRUST and other frameworks. While the policy and procedure sets till needs to be audited and certified, it shifts the focus to certifying at…
2 votes -
Offline Assessment: Confirmation that an upload is occurring and a progress bar
Confirmation that an upload is occurring and a progress bar.
10 votes -
Allow us to download v.9.6
We see 9.6 in the dropdown box but I cannot select it.
2 votes -
Remove Duplicate Controls Based on Which is More Stringent
MyCSF needs to have a job that runs which ranks the controls on a level of strictness and removes duplicate controls that are less strict when they provide the same coverage. Often times, we see multiple of the same controls (with just a timeframe changed, more requirements than one another, etc.). Removing duplication would help speed up certification.
Ex: 1141.01bCMSSystem.12 - The organization
1. disables accounts of users posing a significant risk immediately, not to exceed 30 minutes after discovery of the risk.11962.01bNYDOHSystem.3 - The organization
1. disables accounts of users posing a significant risk within 60 minutes of…16 votes -
Scope of the Assessment - Description on Access
Description of how the Systems are Accessed by all parties should be a separate column and not embedded in the Description portion. It is not intuitive that Access is part of the Description. Access is a separate attribute and should be treated as such.
2 votes -
QA and Support Work together
It would be helpful for Tasks to come back in a state that can be edited. Most of the time the QA sends something back that needs edited, and the Control is locked. When you attempt to get with support to help you fix it, it is a prolonged process with a lot of back and forths and delayed responses. QA and Support need to work together if the tasks are going to come back where Support needs to be engaged.
5 votes -
8 votes
-
System Documentation Definition
Define System Documentation in the Glossary of Terms
1 vote -
Need to be able to Designate to Others within the offline assessment and be able to import it into MyCSF.
The Offline Assessment spreadsheet needs a column for "Designate to Others" and to be able to import it back into MyCSF without emailing the user.
1 vote -
Glitch: When updating score dropdown, if Save is clicked just after, the score is not preserved
Glitch: When updating score dropdown, if Save is clicked just after, the score is not preserved
3 votes -
Include Inheritance reports in the Analytics tab.
It would be beneficial to include the ability to export a list of all inheritance and their associated properties for an object to a CSV/Excel document from the Analytics report tab.
3 votes
- Don't see your idea?