337 results found
-
Bulk remove delegates
It would be nice if there was a way to remove delegates from an entire domain without going through each control one by one.
1 vote -
Show maturity when multiple people are delegated to a control but not completed
Currently, If there are multiple people delegated to a control, the entire domain maturity does not appear in the "Domains by Average Maturity " report even if one of the delegates have entered their scores. I feel that the report should show the maturity in its current state to give a more accurate picture of all domains so that decisions can be made for additional worked needed to be performed. For example, I have 2 people deleted to a control. Delegate #1 enters values of policy 100%, procedure 0%, implementation 100%, measure 75%, manage 0% and delegate #2 is working…
1 vote -
Make the help site more apparent
The https://help.mycsf.net/ page should be front end center in the 'Need Help?' box on the side of the portal and/or a menu item at the top.
1 vote -
Offline for Interim
Offline assessment for Interim
1 vote -
Can we get access to the Offline assessment for the interim assessments
Can we get access to the Offline assessment for the interim assessments
1 vote -
in document descriptions when entering docs into Hitrust it is fine if you link to a document already uploaded but you should be able to add
you should be able to add individual description in different sections of CSF to a document that already exist... as the same document may address different controls.. having to use the same description can be confusing... descriptions for a document should be able to be different in different sections of MYCSF
1 vote -
Policies and Procedures Template per CSF version
Build a Template Policy and Procedure Set for each MyCSF version. Everyone is wasting time and often misaligned when building policies, procedures, standards, guidelines, and plans to comply with HITRUST. I (and I'm sure others) would value HITRUST creating a compliant set of Policies and Procedures that we can implement with minor changes. Either build in a reference section to each document (that shows the MyCSF control it is addressing) or provide a master index, liked HITRUST and other frameworks. While the policy and procedure sets till needs to be audited and certified, it shifts the focus to certifying at…
1 vote -
System Documentation Definition
Define System Documentation in the Glossary of Terms
1 vote -
Need to be able to Designate to Others within the offline assessment and be able to import it into MyCSF.
The Offline Assessment spreadsheet needs a column for "Designate to Others" and to be able to import it back into MyCSF without emailing the user.
1 vote -
External assesors reporting
Grant the ability for external assessors to generate and use reports for their demo environment. This will allow to identify different applicable requirements based on changes on specific factor information.
1 vote -
Marking a Control Automatically Complete Prematurely
The control should not be marked as completed until there is 1) N/A marked 2) 100% inheritance marked or 3) where the control is applicable (partially or in whole) AND inheritance is 0-75%, linked documents applied with subscriber comments.
Controls are being marked completed (automatically by the system) when Inheritance is applied, even if the inheritance is less that 100%. The subscriber still needs to add their control testing for their portion of the control. The control should be deemed incomplete until they have linked documents and subscriber comments. Otherwise the status wheel is an inaccurate representation of the status…
1 vote -
Email Notification Configuration Options
Ability to configure email communications from myCSF to tailor emails such as inheritance requests. More granular notifications and email subjects / recipients for the emails is desired.
1 vote -
Authoritative sources -Standards and Frameworks
When will the authoritative sources be updated to the most current versions, i.e.: CMM 3.0 to 4.0x, ISO 27001- 2013 to 2022?
1 vote -
Not able to download Offline Assessment
I am not able to download Offline Assessment
I need this to save my assessment on a higher priority.
1 vote -
Assessment Object
Please consider not tying certified assessment to the assessment object. This way, customers can use MyCSF to house all the previous assessment reports in one location without needing to purchase additional assessment objects.
1 vote -
Inheritance Color and Size of Dot
Please change the color for those controls that are being inherited to a darker color and a larger dot to make it easier to see.
1 vote -
Editing comments in QA tasks, and the ability to adjust QA tasks
Currently any QA task opened, when remarking, you cannot go in and edit/delete comments. I cannot tell you how many times my fat fingers have hit enter mid sentence/comment and then I had to finish the sentence comment with another entry. Please make comments where they can be edited/deleted. If needing to keep certain things as a matter of record, at least keep things editable, and then have a marker/recording that shows edited as a time stamp or something. Additionally, instead of a new QA task needing to be created because it lacked substance or the right tools, allow the…
1 vote -
DNV
DNV is used instead of Joint Commission at our facility. Could DNV be added and cross mapped like JC is? www.dnv.com
1 vote -
Assessor Contacts
It would be faster, more efficient, if the Assessor Contacts can be input at the beginning (and if needed, ad hoc) and then a drop down of those contacts appear for each control instead of having to type them in over and over in each control.
1 vote -
RDS
The old RDS interface gave me a report, but the new one seems to have removed it which made me sad.
1 vote
- Don't see your idea?