- 2 Minutes to read
- Print
- PDF
Cyber Security Products
- 2 Minutes to read
- Print
- PDF
Introduction
Cyber Security Products (CSP) is a simple assessment module in SAFE that takes input about the Implementation Status and percentage Coverage Status of the implemented Cyber Security Products. There are 30+ Cyber Security Products available in SAFE.
You can see the summary of the Cyber Security Products assessment on the Questionnaire page.
Assess Cyber Security Products
To assess the CSPs:
- Click the Questionnaire option from the left navigation.
- Click the Cyber Security Products summary card.
- Select an appropriate option for the implementation status drop-down. There are four options available; Not Applicable, Not Assessed, Qualified, and Failed.
- Not Applicable: Select this option if the Cyber Security Product does not apply to your organization.
- Not Assessed: Select this option if the Cyber Security Product applies to your organization, but the assessment still needs to be completed.
- Qualified: Select this option if the Cyber Security Product passes the assessment. It is important to define the coverage status percentage by sliding the coverage status sliding bar toward the right to the appropriate percentage.
- Failed: Select this option if the Cyber Security Product fails the assessment.
- The system auto-saves your input.
By default, Cyber Security Products implementation status is Not Assessed, and it impacts the SAFE Score.
View Control Details
On clicking a Cyber Security Products from the list, you will be redirected to the control list name. Here you can further click on a control to go to the control details page. The control details page displays the control description, risk description, remediations, MITRE ATT&CK mapping, and control history. It also allows you to add comments and evidence.
Add Comments and Evidence
SAFE allows you to upload evidence and add comments as proof of action while changing the status of controls. The evidence and comments help users to understand the reason behind changing the control’s status.
To add comments or evidence:
- Navigate to Cyber Security Products.
- Click a Cyber Security Product and navigate to the control details page.
- Select the Control Answer from the drop-down available for the control.
- Click the Comments & Evidence option.
- Click the + Add Comment button.
- On the Comment & Evidence pop-up, add comments and upload the evidence.
- Click the Save button.