Getting started with frameworks
Under the menu item "Frameworks", you can choose from a range of predefined standards and regulations – such as ISO 27001, NIS2, and GDPR. We’ll keep expanding the list and make sure existing templates stay up to date. Access to specific framework templates depends on which other plans you have purchased. For example, the GDPR template requires the Data Protection plan. Read more here: What is a framework.
Each template includes suggested activities – such as policies, procedures, risk assessments, or security measures to help you get started quickly.
Creating a framework
Simply click "Add framework" on the framework you want to plan.
The framework will have prefilled the name, description and compliance area. You can edit this information if needed. Also, you will have to add a framework owner from your organisation. Click "Next" to continue.
Selecting controls
The next dialogue displays all available controls within your chosen framework. Select the controls relevant to your organisation – not every control may apply. For any deselected controls, you must specify a reason for exclusion in the notes column. Custom controls can be added later if required.
Each control comprises one or more tasks. Selecting a control will plan all underlying tasks. Hover over the task tag to view task names within each control. Some tasks may span across multiple frameworks, so they might already be planned from other frameworks:
- Green tag: All tasks within the control are already scheduled
- Blue tag: Some tasks within the control are scheduled
- Purple tag: No tasks within the control are scheduled
Assign responsibility and deadlines
You also need to specify who in the organisation is responsible for the control. By default, this field (control coordinator) is prefilled with the framework owner. Once the framework has been planned, you will have the option to assign task responsibility within each control.
Next select a deadline for each control. By default, the deadline is set to the upcoming month. Tasks under the control will inherit the chosen deadline. If you wish to set separate deadlines for individual tasks, this can be done later. Any tasks that have already been scheduled with a specific deadline will retain their original deadline.
Lastly, you can add an optional note for each control.
When ready click "Create". This action will import the framework.
