88 results found
-
Provide a functionality to download all inheritance requests from Mycsf in CSV format
Provide a functionality to download all inheritance requests from Mycsf in CSV format. This will help CSP providers manage the inheritance requests queue, and will help with tracking and reporting.
1 vote -
Add feedback textbox to provide a justification as to why an inheritance was rejected
Add two boxes within the inheritance portal that CSP providers can give feedback to the inheritance requests. This will be useful to provide feedback on why an inheritance was rejected. Ideally, there should be two approvals, one for the requirement and one for the weight.
3 votes -
Add a date to the inheritance requests queue
Within MyCSF, please add a date which shows when an inheritance request was created, submitted, approved, and applied. This will be especially helpful to track the review of the inheritance requests.
1 voteRequested date has been added to the Inheritance pages
-
MyCSF Reliance Tracking
This would leverage the MyCSF workflow and functionality for inheritance and extend part of it to reliance.
1. Add a button for 3rd Party Report Reliance to the UI for each CR
2. Allow update of 3rd party reports in bulk that identifies the documents as such and collects pertinent information about the report to include (type, issuance date, review period)
3. When reliance is used for a CR they would click the button and select which report from #2 is being relied upon.This will allow the interim selection process to exclude CR that used 3rd party reliance to…
1 votethis was included in the nov. 2020 release and will be enabled alongside the userforms and tasks functionality
-
Content block to manage Acceptance Letter contents
Content block to Manage Acceptance Letter
0 votes -
Disable and Auto-Complete Factor based upon Condition
1.1.1 The system shall have a control/constraint that disables and auto-answers a technical factor when another technical factor is set to “Yes”.
0 votes -
Format Match: Recreated Certified Assessment to match Pre-Assessment format of Original
The system shall ensure that the Pre-Assessment format of the recreated Validated Assessment matches the linked Original Certified Assessment.
0 votes -
The ability for users to remove inheritance was submitted to the assessor
Currently, there is no way for users to remove inheritance or inheritance requests once submitted. If the auditor tests it, and finds that inheritance is not appropriate, there needs to be an easier way to remove inheritance rather than requesting from HITRUST support.
25 votes -
Warning Message on External Assessor Time Sheet and QA Checklist
The system shall display a warning message on the External Assessor Time Sheet and QA Checklist.
0 votes -
New Role for External Assessor Accounts: “Engagement Executive”
The system shall have an additional role for External Assessor Accounts named: “Engagement Executive”.
0 votes -
New Role for External Assessor Accounts: “QA Reviewer”
The system shall have an additional role for External Assessor Accounts named: “QA Reviewer”.
0 votes -
Ability for Super Users and External Assessors to Assign an Engagement Executive on the Name & Security page
The system shall have an additional EA Assessment role named: “Engagement Executive”.
0 votes -
Ability for Super Users and External Assessors to Assign QA Reviewers on the Name & Security page
The system shall have an additional EA Assessment role named: “QA Reviewer"
0 votes -
Offline Assessment: Third Party column
The Offline Assessment spreadsheet should have an additional column within the “Documents” sheet titled: “Third-Party Report?”. The value should be ‘Yes’/ ‘No’. “No” should be set as the default
0 votes -
Google Maps integration
When completing the “Primary Mailing Address” and Facility’s address fields during the Pre-Assessment as well as Management Representation Letter, MyCSF should integrate Google Maps Address Validation to ensure the City/Town, State/Province/Region, Country, and Zip/Postal Codes are accurate
4 votes -
Update QA Progress Report to include Interim
Allow the QA Progress Report to be utilized for Interim Assessments
0 votes -
Phasing out Password rotating requirement
The following requirement I believe will eventually be less common as companies are moving away from rotating passwords and might need to be inclusive of all methods going forward as password rotating will probably be slowly phased out.
ID: 1031.01d1System.34510 “The organization changes passwords for default system accounts, at first logon following the issuance of a secure temporary password, when there is a suspected compromise, and no less than every 90 days for regular accounts or 60 days for privileged (i.e., administrator accounts).”
It has been discussed for years now that rotating passwords leaves individuals more prone to have to…
1 voteGreat suggestion. This is addressed in v9.4 of the CSF and will continue to be reflected in future CSF versions.
-
Permit the changing of the Offline Assessment filename
Today, the name of the Offline Assessment file must remain as is. This proposed change would allow the file name to be altered post download. The tool would throw a warning when a file is uploaded with an altered name, but ultimately the user could confirm and the file would be processed.
7 votes -
Move the Offline Assessment to the Assessment Homepage
The Offline Assessment link to initiate, download, and upload an Offline Assessment should be moved to the Assessment Homepage in order to bring more awareness for the functionality.
3 votes -
Ability to simulate changes to an assessment
MyCSF should have the capability to take an object and simulate changes in the pre-assessment such as changing factors. The simulation should allow the user to see what requirement statements would be added/subtracted along with the current status of those requirement statements (eg: scored, N/A, validated by assessor, etc).
5 votes
- Don't see your idea?