Skip to Main Content
Cyber GRC Ideas Portal
ADD A NEW IDEA

All ideas

Showing 34

Auto closure of issues if related vulnerability is not active

Issues created by vulnerability scan should be auto-closed if in the subsequent scans, that vulnerability is not active A new source type – External Vulnerability Update to be supported in Issue management app. This feature should be an optional f...
Guest over 6 years ago in Threat & Vulnerability Management 0 Pending Roadmap Inclusion

New comparison report to track SLA adherence

The SLA applied by TVM team on IT resource users is 90 days. All the issues open on the 1st day of the quarter has to be stored (Issue, Action, start date, Due Date, Title, Pending with, Owner by Org, Owner etc.,). The same vulnerabilities/issues ...
Guest over 6 years ago in Threat & Vulnerability Management 0 Pending Roadmap Inclusion

Pre-Vulnerability scan workflow and Approval workflow

Users can raise request/ticket for server movement, new server commissioning, production movement etc., This will trigger Nexpose scan on the target IP by TVM coordinator Once the vulnerability scan results are out and no issues are triggered, the...
Guest over 6 years ago in Threat & Vulnerability Management 0 Pending Roadmap Inclusion

When Scanning the key should be configurable from IP address to Hostname

When assets are pulled in from CMDB Service Now IP address information is not held. Therefore the scanner will pick up many IP addresses where the Asset is available but no IP information is entered. The ask is to include in M7 the ability to conf...
Guest over 7 years ago in Threat & Vulnerability Management 2 Pending Roadmap Inclusion

Form- ‘Create GRC Libraries from UCF Authority Document List’ form, The checkbox ‘Create all applicable Harmonized Controls’, ‘Create Implied Controls (for Control Hierarchy) ‘ and ‘Use UCF Control Classification (for Purpose) and Control Type (for Type)’ should have the link reports to view list of Controls.

No description provided
Guest almost 8 years ago in IT and Cyber Compliance 4 Pending Roadmap Inclusion

Ability to view the Requirements and Questions/Procedures mapped to that Authority Document. Please provide report links with updated status [New/Modified] in respective tab in ‘Create GRC Libraries from UCF Authority Document List’ form.

No description provided
Guest almost 8 years ago in IT and Cyber Compliance 3 Pending Roadmap Inclusion

Update to Library Object characteristics when doenloading the objects from UCF

At the moment, 4 library objects can be created from the UCF content: Controls, Area of Compliance, Requirements and Question/ Procedure. The characteristics captured at the download time do not align with the characteristics of the object when it...
Guest almost 8 years ago in IT and Cyber Compliance 1 Pending Roadmap Inclusion

Need to prefix IDs for all GRC Objects that are imported from UCF

This requirements is from one of our customer CBS. They want to use UCF controls to assess their IT Assets along with their standard controls. Today they are not able to distinguish controls based on control IDs. Since control IDs are ones which i...
Guest almost 8 years ago in IT and Cyber Compliance 1 Pending Roadmap Inclusion

Reuse Ownership information across all objects when GRC libraries copied from UCF

When GRC libraries are copied from UCF, ownership information needs to be entered for all objects. This is not so user friendly when the owners are same for all objects. if we can have check box for same owners across all objects, it is more user ...
Guest almost 8 years ago in IT and Cyber Compliance 1 Pending Roadmap Inclusion

Need the ability to provide One time upload of data for - ISO 27001, ISO 27002, HIPPA, HIPPA Security Rule, PCI DSS v3.1 and NIST 800-53

Need the ability to provide One time upload of data for - ISO 27001, ISO 27002, HIPPA, HIPPA Security Rule, PCI DSS v3.1 and NIST 800-53. I know some of the data are available as part of UCF content, but this customer is not buying UCF and they wa...
Guest over 8 years ago in IT and Cyber Compliance 2 Pending Roadmap Inclusion