Ability to upload, access, and edit assessment documentation using something other than the Web interface
MyCSF should support common file handling protocols to manage assessment documentation. This should operate similar to how Web applications such as media servers (Plex, Ombi) and online document repositories (livelink, sharepoint) work... these allow the upload and accessing of files using a alternate protocols such as SAMBA, SCP, and SFTP. Any file and folder changes made using supported protocols are reflected in the Web application front-ends. MyCSF should function in a similar fashion.
If this existed, users wouldn't have to upload each and every file using our Web front-end nor would they have to manually associate each artifact to the associated requirement statement and PRISMA attribute(s).
Ideally a user would be able to connect with Windows Explorer, a SCP client, or a SFTP client, and navigate the assessment's folder structure as follows:
-- domain
--- requirement
----- policy
----- process
----- implemented
----- measure
----- managed
Files can be mapped to the requirement and attribute by simply dropping them into the folder. Not sure how to do the internal references though, maybe shortcuts or something.
This mechanism could be an alternative to using the web GUI. Both ways could work interchangeably. The folders could be accessed by scp, ftp, samba, etc.