IT and Cyber Compliance

We have UCF integration but the system should suggest mappings to GRC objects and aid users to add suggested requirements/risks/policies when they are creating their GRC program design in the set up stage…. We lack context…People want this level o...

we also need scorecard type views that are drill downable that shows results of testing/self assessments statuses to requirements that are met or not met.

We implemented this within CSIG NA where we have enhanced the report 'References (Mapping with GRC Content)' to pull in policy documents (inline and attached) as reference objects. This way we can test controls with respect to a policy. This is al...

The system should be packaged such that it offers a turnkey PCI DSS 3.1 compliance solution.

Often there is a requirement to test a Policy by testing Controls related to that Policy.

When an open task crossed its due date, the status is showed as Overdue in the Self-Assessment Status chart and Self-Assessment Test Task Status report. But the status is showed as Open when we open the form for the overdue assignment. It is confu...