42 results found

1. [BL] Data Type Classification for Documents

   MyCSF should include the data type classification for documents. Example- if a document type is Classified and/or Confidential then only users within the organization should be able to view that document. Should also be a classification type that is acceptable for Assessors to view.

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Documents & Evidence  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Auto-associating uploaded evidence based on special strings in filenames

   When a file is uploaded evidence into an assessment, MyCSF should be able recognize special strings filename to automatically link the file with control maturity levels and/or requirements.

   Some examples:
   • A document uploaded with a title of "New hire population [Imp].xlsx" would automatically be linked to the requirement's implemented level.
   • A file titled "IT security policies [Pol, Pro].pdf" would automatically be linked to the policy and procedure levels.
   • An uploaded document with a title of "Termination samples IMP 3334.0.xlsx" would automatically be linked to the implemented level of the requirement with the CVID of 3334.0.

   This could be made available through a customizable "Document Linkage Rules" are of an assessment (see linked pic).

   This, paired with the bulk .zip import capability, would enable an entire assessment's worth of evidence to be uploaded and correctly linked all in one action (without needing to use the offline assessment template).

   When a file is uploaded evidence into an assessment, MyCSF should be able recognize special strings filename to automatically link the file with control maturity levels and/or requirements.

   Some examples:
   • A document uploaded with a title of "New hire population [Imp].xlsx" would automatically be linked to the requirement's implemented level.
   • A file titled "IT security policies [Pol, Pro].pdf" would automatically be linked to the policy and procedure levels.
   • An uploaded document with a title of "Termination samples IMP 3334.0.xlsx" would automatically be linked to the implemented level of the requirement with the CVID of 3334.0.

   This could… more

   •  

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Documents & Evidence  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating