|
At the Technology Subway Stop, there a number of pre-populated "required" items. These items are there to help new users track down items that are directly referred to by some of the controls. The list is not meant to be comprehensive, but a starting point for the assessment. |
 |
For example, AU.3.046 (NIST 3.3.4), AU.3.048, and AM.3.051 (NIST 3.3.5) refer to a "centralized logging solution" and "central repositories" for logs. So, FutureFeed includes both a "Logging Database" in the Company Profile>Electronic Data Locations as well as "SIEM / Log Monitoring System" in the Technology>Tools and Services area as "required" inventory items.
 |
 |
|
To fulfill a Compliance Required Role, simply add the item to the inventory with the "+" button and then use the dropdown to connect the Compliance Required Role to the inventory item. |
|
 |
If a required item is not applicable to the organization or you simply prefer not to use the required item, use the "Power Button" to turn to item off and it will be ignored when tracking progress on the assessment. |
Comments
0 comments
Please sign in to leave a comment.