Make all 44 authoritative sources into optional (selectable) regulatory factors
When setting up a new assessment, only a subset of the 44 authoritative sources in the CSF today are selectable / optional regulatory factors. Instead, 44 authoritative sources should be made into optional (selectable) regulatory factors.
2
votes
![](https://secure.gravatar.com/avatar/7f8412aa1b1f57e64f9a7864dbd10477?size=40&default=https%3A%2F%2Fassets.uvcdn.com%2Fpkg%2Fadmin%2Ficons%2Fuser_70-6bcf9e08938533adb9bac95c3e487cb2a6d4a32f890ca6fdc82e3072e0ea0368.png)
-
For those authoritative sources which are completed covered through "core" / baseline CSF requirements, they should still show up in the list of selectable authoritative sources but be checked and locked. When the user mouses over the authoritative source a mouse-over modal would explain that the source is fully covered in core / baseline and therefore cannot be excluded.