340 results found
-
Rapid Reassessment
Allow for the audit to be completed before forcing a warning each and every time a control is updated.
The warning is:
Control Degredation
This i1 Rapid Assessment contains 15 Requirement Statements with scores lower than the previous i1 Validated Assessment. This exceeds the amount of degredation allowed to continue with the i1 Rapid Assessment. This i1 Rapid Assessment must be converted to a full i1 Validated Assessment.
We are not done with the assessment. Even if we chose to default score at 100%, there are controls that require work and need to be worked as such. To have this…
1 vote -
Scope of the Assessment Completeness
The auditor should not be able to move on/thumbs up the scope of the assessment of not all the required fields are completed. Often the, description of the Services within the forms are left off. This becomes a QA Task. In order to prevent this QA task, make is so that the auditor cannot thumbs up the page if it is not completed.
1 vote -
Expand the Authoritative Resources for Source Mapping to include ENS for Spain
Expand the Authoritative Resources for Source Mapping to include ENS for Spain. AKA: Certification of Conformity with ENS (Esquema Nacional de Seguridad)
1 vote -
Remove delegate but not the scores
If a control has multiple delegates and the scoring is completed by one of the delegates, removing all delegates from that control should not remove the scores that were previously set.
1 vote -
Bulk remove delegates
It would be nice if there was a way to remove delegates from an entire domain without going through each control one by one.
1 vote -
Show maturity when multiple people are delegated to a control but not completed
Currently, If there are multiple people delegated to a control, the entire domain maturity does not appear in the "Domains by Average Maturity " report even if one of the delegates have entered their scores. I feel that the report should show the maturity in its current state to give a more accurate picture of all domains so that decisions can be made for additional worked needed to be performed. For example, I have 2 people deleted to a control. Delegate #1 enters values of policy 100%, procedure 0%, implementation 100%, measure 75%, manage 0% and delegate #2 is working…
1 vote -
Make the help site more apparent
The https://help.mycsf.net/ page should be front end center in the 'Need Help?' box on the side of the portal and/or a menu item at the top.
1 vote -
Offline for Interim
Offline assessment for Interim
1 vote -
Can we get access to the Offline assessment for the interim assessments
Can we get access to the Offline assessment for the interim assessments
1 vote -
in document descriptions when entering docs into Hitrust it is fine if you link to a document already uploaded but you should be able to add
you should be able to add individual description in different sections of CSF to a document that already exist... as the same document may address different controls.. having to use the same description can be confusing... descriptions for a document should be able to be different in different sections of MYCSF
1 vote -
System Documentation Definition
Define System Documentation in the Glossary of Terms
1 vote -
Need to be able to Designate to Others within the offline assessment and be able to import it into MyCSF.
The Offline Assessment spreadsheet needs a column for "Designate to Others" and to be able to import it back into MyCSF without emailing the user.
1 vote -
External assesors reporting
Grant the ability for external assessors to generate and use reports for their demo environment. This will allow to identify different applicable requirements based on changes on specific factor information.
1 vote -
Marking a Control Automatically Complete Prematurely
The control should not be marked as completed until there is 1) N/A marked 2) 100% inheritance marked or 3) where the control is applicable (partially or in whole) AND inheritance is 0-75%, linked documents applied with subscriber comments.
Controls are being marked completed (automatically by the system) when Inheritance is applied, even if the inheritance is less that 100%. The subscriber still needs to add their control testing for their portion of the control. The control should be deemed incomplete until they have linked documents and subscriber comments. Otherwise the status wheel is an inaccurate representation of the status…
1 vote -
Email Notification Configuration Options
Ability to configure email communications from myCSF to tailor emails such as inheritance requests. More granular notifications and email subjects / recipients for the emails is desired.
1 vote -
Authoritative sources -Standards and Frameworks
When will the authoritative sources be updated to the most current versions, i.e.: CMM 3.0 to 4.0x, ISO 27001- 2013 to 2022?
1 vote -
Not able to download Offline Assessment
I am not able to download Offline Assessment
I need this to save my assessment on a higher priority.
1 vote -
Assessment Object
Please consider not tying certified assessment to the assessment object. This way, customers can use MyCSF to house all the previous assessment reports in one location without needing to purchase additional assessment objects.
1 vote -
Inheritance Color and Size of Dot
Please change the color for those controls that are being inherited to a darker color and a larger dot to make it easier to see.
1 vote -
Editing comments in QA tasks, and the ability to adjust QA tasks
Currently any QA task opened, when remarking, you cannot go in and edit/delete comments. I cannot tell you how many times my fat fingers have hit enter mid sentence/comment and then I had to finish the sentence comment with another entry. Please make comments where they can be edited/deleted. If needing to keep certain things as a matter of record, at least keep things editable, and then have a marker/recording that shows edited as a time stamp or something. Additionally, instead of a new QA task needing to be created because it lacked substance or the right tools, allow the…
1 vote
- Don't see your idea?