Make all 44 authoritative sources into optional (selectable) regulatory factors
When setting up a new assessment, only a subset of the 44 authoritative sources in the CSF today are selectable / optional regulatory factors. Instead, 44 authoritative sources should be made into optional (selectable) regulatory factors.
AdminJeremy Huval (Chief Innovation Officer, HITRUST) shared this idea
For those authoritative sources which are completed covered through "core" / baseline CSF requirements, they should still show up in the list of selectable authoritative sources but be checked and locked. When the user mouses over the authoritative source a mouse-over modal would explain that the source is fully covered in core / baseline and therefore cannot be excluded.