Security framework
Workshop 1.4: determine the baseline security, i.e. the state of compliance with the frameworks selected for the study. This is the starting point that states where things stand before analysing what could happen.
Selecting frameworks
The sidebar lists the available frameworks. Check Selected to include a framework in the study — only selected frameworks are included in the report.
The Summary tab recaps the selected frameworks and their validation status.
Scoring the articles
Each article receives a score and, in case of a gap, a gap justification.
| Score | Meaning |
|---|---|
| 3 | Satisfactory |
| 2 | Partial |
| 1 | Insufficient |
| 0 | Not assessed |
Three ways to fill it in
By hand — article by article.
From vulnerabilities (auto mode) — pre-fills the scores from the assessments of workshop 1.5, via the links defined in 1.6. The button shows the coverage rate: below a threshold, it flags that coverage is insufficient for the pre-filling to be reliable. Each article shows how many linked vulnerabilities have been assessed, and can be forced into manual mode.
From an audit — the Import from audit button converts the statuses of every audited cyber grid into compliance scores:
| Audit status | Score |
|---|---|
| Compliant | 3 |
| Partial / minor gap, observation | 2 |
| Non-compliant (major non-conformity) | 1 |
| Not applicable | unchanged |
Audit observations are carried over as gap justification. A preview announces the number of articles concerned and warns if manually entered scores will be overwritten — overwriting is an option to tick. The import can be undone with a single Ctrl+Z.
Two-way flow with the Audit module
The transfer works both ways: the audit grid has a Transfer to baseline button, and flags when the baseline score diverges from the audit result.