Sections are categories that exist within a security framework that divide the framework into more manageable areas. For example, if a framework is called Enterprise Physical Security, some of its sections could include Physical Security or Fire Safety. Once a framework has been created and had sections added to it, those sections must then be updated.
To update a section:
-
Log into a user account that's been added to the Security Assessment Team user group.
-
Click the dropdown in the nav bar > Library.
The nav bar.
-
Navigate to the Security Audit Frameworks tab.
The Security Audit Frameworks tab.
-
Click a framework in the Active state to open the Framework Review form.
The Framework Review form.
-
Scroll down to the Sections field and click the Section you wish to update to open the Section Review palette.
The Section Review palette.
-
Optional: Edit the Section Name and Description fields as needed.
-
In the Details section, adjust the value in the Weighting field to reflect how much of a percentage of the total framework this section should take up. The total weighting of all sections in each framework should equal 100%.
-
In the Sub Sections section, an existing sub section can be added by typing its name in the search bar and selecting it. To create a new sub section from scratch, click + and fill in the required fields. See the Update a Sub Section article for more detailed information on filling out this form. Click X next to an existing sub section to remove it from the section.
Sub Sections within a security framework
-
In the Questions section, an existing question can be added by typing its name in the search bar and selecting it. To create a new question from scratch, click + and fill in the required fields. See the Review a Requirement article for more detailed information on filling out this form. Click X next to an existing question to remove it from the section.
The Questions section.