Make all 44 authoritative sources into optional (selectable) regulatory factors
When setting up a new assessment, only a subset of the 44 authoritative sources in the CSF today are selectable / optional regulatory factors. Instead, 44 authoritative sources should be made into optional (selectable) regulatory factors.
2
votes
AdminJeremy Huval
(Chief Innovation Officer, HITRUST)
shared this idea
-
For those authoritative sources which are completed covered through "core" / baseline CSF requirements, they should still show up in the list of selectable authoritative sources but be checked and locked. When the user mouses over the authoritative source a mouse-over modal would explain that the source is fully covered in core / baseline and therefore cannot be excluded.