All ideas

Need the ability to provide One time upload of data for - ISO 27001, ISO 27002, HIPPA, HIPPA Security Rule, PCI DSS v3.1 and NIST 800-53. I know some of the data are available as part of UCF content, but this customer is not buying UCF and they wa...

ISF IRAM is a framework for IT risk assessments.

The system should be packaged such that it offers a turnkey COBIT 5 compliance solution.

The system should be packaged such that it offers a turnkey PCI DSS 3.1 compliance solution.

The system should be packaged such that it offers a turnkey ISO 27001/2 compliance solution.

Often there is a requirement to test a Policy by testing Controls related to that Policy.

QualysGuard has an inventory of Assets being scanned and it therefore adds value to import the same set of Assets into the GRC Asset Library.

From an integrated GRC approach it adds value to have an Asset's Process linkage available under Asset vocabulary when defining Remediation Rules.

Increasingly FIPS 199 is being leveraged as a method to classify Assets in order to determine their business significance. It adds value to enhance the Asset Library to support the FIPS 199 methodology.

From an integrated GRC approach it adds value to have an Asset's Risk Rating/Score available under Asset vocabulary when defining Remediation Rules.