One platform to assess, score and approve the security of 100+ departments, instead of email and Excel.
50 to 60 controls per assessment, each scored 0 to 5 with its own weight.
Right to left by default, English second. Every screen, report, alert and empty state exists in both.
An assessment moves between the security team and the department. Tap a step to see who acts.
Builds the framework, sets up the campaign and publishes it.
Every toolkit, its version and where it's used.
Functions and controls, each with its weight.
What changed between two versions, row by row.
Pick the framework. Its version locks at publish.
Choose the agencies and departments.
Switch controls off for one department only.
A deadline for every step, per department.
A lead auditor for each department.
Check everything once, then publish.
Every campaign with its progress and status.
Each department's step, deadline and progress.
On track, near the deadline or overdue.
The SPOC answers one function at a time.
A score, the evidence and the thread, in one place.
Every file, linked to its control.
Submissions waiting for the auditor.
Check the evidence, score it, or send it back.
One score, from each control up to the campaign.
Four templates, built in the background.
Template, settings, review: three steps.
Each role opens on its own dashboard and sees only its own scope, by role, domain, department and status.
Sees The whole platform: users, teams, frameworks and set-up.
An earlier attempt failed because screens showed different numbers. So there is one scoring engine, and every screen reads from it. Try it.
ITS-1.1.1Access provisioning documentedITS-1.1.2MFA for privileged and remote accessITS-2.1.1Firewall configuration policyITS-3.1.4Backups tested regularlyΣ(w × s) / Σw(6 + 12 + 3 + 12.5) / 9
Full precision 3.7222…, rounded once, on screen.
Flag the items to fix. Only those reopen. The rest stay frozen, so nobody redoes forty items to fix three.
Nothing flagged. Everything stays frozen.