High Level Summary:
- Updates to the CrossWalk Assessments module
- Updates to the Template Library UI/UX and New Standard Content available to all customers.
New Features:
- Enhancements to the SCF-CMM - SCF-CMM (officially called the SP-CMM from the Secure Controls Framework) will now be available to all customers. This is the recommended question type for most assessments. The downloadable results report will also include definitions for each of the CMM levels and explain the realistic expectations of an organization at their maturity and organization size.
The SP-CMM is meant to solve the problem of objectivity in both establishing and evaluating cybersecurity and privacy controls. There are three main objectives for the SP-CMM:
- Provide CISOs/CPOs/CIOs with objective criteria that can be used to establish expectations for a cybersecurity & privacy program;
- Provide objective criteria for project teams so that secure practices are appropriately planned and budgeted for; and
- Provide minimum criteria that can be used to evaluate third-party service provider controls.
- Template Library - The Template Library has been revamped and refreshed with new standard content for all customers allowing any organization regardless of size to build or maintain their security program. In addition, the user experience has been enhanced so that MyVCM will now create a draft of Documents or Training templates in MyVCM for you, reducing the time it takes to implement and publish a new policy or procedure. Included in each policy and procedure template are recommended procedures tailored to a MyVCM administrator.
- Search in CrossWalk Assessments - CrossWalk Assessments now has search capabilities with advanced search functionality to be able to quickly search through a lengthy assessment. Search for criteria such as question content, question description, section headers, smart tag number, and smart tag description.
- Descriptions in CrossWalk Assessments - The ability to add a description to a question has now been added to MyVCM CrossWalk Assessments. With this capability, users can now add additional context to a question such as providing a description of the recommended evidence required for a question.
- Create a new artifact from an assessment - When adding evidence to a question, users are now able to quickly create a new MyVCM artifact so that they no longer have to leave an assessment to do so.
- Export an Assessment as a Template - Users will now be able to export an already published assessment as a template for a new one. This allows the ability for users to view an assessment in a .xls format to update the assessment outside of the Assessments module or the reupload into another MyVCM instance.