Documents Repository and Linkage
One of the most time consuming tasks in performing assessments is the linkage of documentation. I think it would be helpful if our documentation repository creates a slot for each document. The slot is then mapped in a one to many relationship model to control requirements. The documents are then uploaded to the virtual slot. The big advantage is that documents in the slots can be automatically mapped to any assessment object and if the most recently reviewed version of a policy is uploaded to the slot to replace the old version, the new one automatically mapped as well. This will make the heavy lift the first assessment an organization performs. Subsequent assessments retain the linkages to the version of the document in the mapped slot. The only updates would be to review the slot linkages to make sure they still are valid. It would save a great deal of mindless hours of point and click. Also, from an assessor stand point, if there is a document in the slot and the assessor gives it a thumbs up, then the tool should automatically link it as the assessor to the control requirement. Again saving some expensive and low value assessor time in performing validations.