All ideas

ISF IRAM is a framework for IT risk assessments.

The system should be packaged such that it offers a turnkey COBIT 5 compliance solution.

The system should be packaged such that it offers a turnkey PCI DSS 3.1 compliance solution.

The system should be packaged such that it offers a turnkey ISO 27001/2 compliance solution.

Often there is a requirement to test a Policy by testing Controls related to that Policy.

QualysGuard has an inventory of Assets being scanned and it therefore adds value to import the same set of Assets into the GRC Asset Library.

From an integrated GRC approach it adds value to have an Asset's Process linkage available under Asset vocabulary when defining Remediation Rules.

Increasingly FIPS 199 is being leveraged as a method to classify Assets in order to determine their business significance. It adds value to enhance the Asset Library to support the FIPS 199 methodology.

From an integrated GRC approach it adds value to have an Asset's Risk Rating/Score available under Asset vocabulary when defining Remediation Rules.

When an open task crossed its due date, the status is showed as Overdue in the Self-Assessment Status chart and Self-Assessment Test Task Status report. But the status is showed as Open when we open the form for the overdue assignment. It is confu...