Filter Domain by control based on control status
When filtering a Domain by Control based on the controls status, such as External Assessor Review Pending or Response for external assessor needed, maintain the control number instead of re-numbering.
Currently, when we filter by the control status the control number changes based on the number of controls in that status. Instead the control number should remain the same so when we are referencing controls there is no confusion if client or assessor is using this filter. Thanks.
Baseline Unique IDs (BUIDs) and Cross-version IDs (CVIDs) are much, much better identifiers to use. The numbers preceding the requirement statements in MyCSF's assessment view change when the domain's sorting and filtering changes (as you stated), making them ill-suited for referencing the requirement statements.