Frameworks : measurement and declaration

"Frameworks" page

A framework is a standard your company must or wishes to follow. You pick the one that concerns you from a list, and the screen unrolls its controls, one by one.

Two truths side by side

For each control, two pieces of information coexist, and that is the subtlety of this page.

The measurement: what the tool observes by itself on your machines. It is recalculated at each evaluation.

The declaration: what you yourself attest. "The password policy was approved by the board on 12 March", "the procedure is applied by Marie". Many controls are documentary: no machine can measure them, and it is your word that counts.

Four states, and a piece of evidence

Each control is compliant, non-compliant, not applicable or not evaluated. The Save evidence button lets you attach a link to the supporting document, the signed policy, the meeting minutes. On audit day, everything is already filed in the right place.

A button also lets you return to the automatic measurement if your declaration no longer applies.

The action plan

Below the list, a panel gathers what remains to be done, from most useful to least urgent. It is a roadmap, not a telling-off: at Les Ateliers, one line is handled per month, quietly.