333 results found
-
Scope of the Assessment - Description on Access
Description of how the Systems are Accessed by all parties should be a separate column and not embedded in the Description portion. It is not intuitive that Access is part of the Description. Access is a separate attribute and should be treated as such.
2 votes -
Suggested User Guide links do not lead to correct page
When the "need help?" popup shows up and suggests related pages from the MyCSF User Guide, the links just go to the User Guide landing page rather than the specific page that addresses the question.
2 votes -
Unable to save the progress
Unable to save the progress after uploading the documents. The Response Status: External assessor review pending. Please link evidence to the implemented level
2 votes -
Remove the headings for each domain on a combined AssessmentReportColumn report
Within the AssessmentReportColumn report (exported to excel), remove the headings for each domain when you set "Split Assessment Domains into Separate Sheets?" as no. Instead of having headings over each domain section, add the domain as another cell within each row. This will remove the need for manual formatting to be able to run formulas, etc.
2 votes -
New User Support Access Role
Create another access role - "User Support" that grants view all access with the ability to upload documentation and scoring (without delegation rights). Preferably with the option to track who updated scoring.
2 votes -
2 votes
-
Add a HITRUST ID column to the HITRUST QA Task Listing in MyCSF (where applicable)
It would help assessors if the unique ID was visible for each task presented in the QA Task List. Currently, we need to drill into each task to uncover what control needs to be addressed. There are tasks related to something not related to a control (i.e. "Scope of the Assessment"), so obviously those would not display a control ID and would show as a empty field value.
2 votes -
Post Submission QA Tasks
It would be helpful to partially unlock the specific items/areas that QA has assigned tasks to post submission. Currently, we have to request help from the support team and it prolongs the process of QA unnecessarily.
2 votes -
Requirement Sorting Within MyCSF
domains, this sort order (whether ascending or descending) makes it easier to quickly find specific requirements. This is especially true when working between MyCSF and an assessment test plan (typically during scoring, commenting, and evidence mapping), because test plans tend to feature this sort order also.
2 votes -
Have Salesforce publish an SRM
It appears that Salesforce does not have an SRM available. As a widely used product it may benefit many subscribers if they published an SRM for use.
2 votes -
collaboration
Very confusing whether multiple people can work in an assessment at one time or not. Sometimes save works, sometimes it doesn't and reverts to previous states. Make it clear how it works with clear UX like in google docs.
2 votes -
Allow select-all for Facilities in Platforms/Systems table
When selecting the facilities where a platform/system is running, have the option to select all facilities rather than needing to go one-by-one.
2 votes -
Applications & Databases are mandatory fields in the Platforms/Systems table, mark them as such when the table is being filled out.
When completing the Platforms/Systems table, some fields are marked mandatory. The Applications & Databases fields are not. However, HITRUST QA requires something to be included here. Please mark these fields as mandatory up front to minimize these QA tasks/findings.
2 votes -
Organize compliance factors by type
It would be helpful to organize the various authoritative sources on the factors page by type, similar to how the sources are organized in Microsoft's Trust Center. See pic for their example.
2 votes -
API for External Assessor
Similar to the customer's offline assessment, the external assessors would like to have this ability as well.
2 votes -
2 votes
-
Issue with offline upload
Hello, I'm having issues uploading the offline assessment to Opt1 – Shearwater Health 2022 Validated Assessment. It's saying 0 rows saved and 0 blank rows were skipped, but not updating the scores
2 votes -
RDS
Add RDS button to the top panel - not intuitive as to how to get back to the options page
2 votes -
Assessors shouldn't have to do anything on "not started" CAPs at interim
It would be nice that if a CAP is not started that MyCSF would be aware of such and not expect the assessor to do anything at interim. This would include attaching documentation since there is technically nothing for them to review. It is not user friendly to have to attach a document because the old score warrants it when there has not been any work done it.
2 votes -
Drop Down for Contact and Interviewed Names
Have the ability to have once place where interviewed names would be captured and then when populating the control artifacts, you have the ability to select from a drop down of pre-populated names and titles, instead of having to type each persons name and title for each and every control. This would save time.
2 votes
- Don't see your idea?