General

General conversation and updates for InfoSec and IT Risk Management professionals

  • 87 Topics
  • 107 Replies

87 Topics

libby.bevin
Community Manager
libby.bevinCommunity Manager
posted in General

NOW AVAILABLE: Updated Learning Offerings and Solutions Center

Hello Community members! You may have noticed a slight change in the navigation bar at the top of the Community. The link to “Training” has been renamed to “Learning.”Why? Learning encompasses more than just training. Product training will still include all of the training you’re used to seeing - but it now includes expanded learning offerings that we’ve been working hard on.Check out our new SOLUTIONS CENTER!The Solutions Center, within the Learning section of Community, was built by our in-house GRC Experts. It includes:Solve and Streamline: Discover efficient solutions to common GRC challenges. Learn and Lead: Equip yourself with foundational GRC knowledge.Can’t wait for you all to explore the now expanded Learning section!

0
libby.bevin
Community Manager
6 days ago
amanda.koski
Community Manager
amanda.koskiCommunity Manager
published in General

Celebrating Excellence: Recognizing Outstanding Contributions!

At RiskOptics, we firmly believe in recognizing and celebrating the achievements of our dedicated team members. From executives to peers, every individual plays a vital role in driving our company's success forward. Acknowledging their hard work not only boosts morale but also fosters a culture of appreciation and collaboration. It's through these efforts that we continue to innovate and thrive in our industry. Let's shine a spotlight on our exceptional team members who have been honored with awards! These awards come in two forms: the Executive Recognition Award, where nominations and votes are cast by our executives to highlight exceptional leadership and performance, and the Peer Recognition Award, where every member of our company has the opportunity to nominate and acknowledge their peers for their outstanding contributions. Dale Chinault, our Senior Developer, is the backbone of our technical team, akin to the engine that drives a high-performance vehicle. His expertise and posit

220
amanda.koski
Community Manager
2 months ago
amanda.koski
Community Manager
amanda.koskiCommunity Manager
published in General

Employee Spotlight: Andrew McEwen, Backend Software Engineer

Meet Andrew McEwenAt the core of RiskOptics' platform innovation stands Andrew, a dedicated member of the Platform Team. With a background in customer service spanning two decades, Andrew brings a unique perspective to his role as a software engineer, aiming not only to solve problems but also to enrich people's lives through software they love to use. Andrew's journey into software engineering was sparked by a simple mobile app project, where he discovered the joy of seeing his code come to life. His passion for creating software and making a positive impact on users' lives led him to pursue a career in the platform team at RiskOptics. Andrew's transition from customer service to software engineering stemmed from his desire to leverage technology to solve real-world problems and enhance user experiences. His dedication to continuous learning and growth fuels his innovative approach to software development. With a keen eye for detail and a commitment to excellence, Andrew consistently

240
amanda.koski
Community Manager
2 months ago
W
wdavisReady to engage in the Community
asked in General

Questionnaire Template Access

I understand that only the Admin and Editor access levels allow a user to access questionnaire templates… However, is it possible to restrict a user’s access to a specific questionnaire template? I’m interested in restricting a specific user with Editor access to access/edit only a subset of all available questionnaire templates in our ZenGRC instance. Thanks!

1
amanda.koski
Community Manager
2 months ago
amanda.koski
Community Manager
amanda.koskiCommunity Manager
published in General

Employee Spotlight: Mariana Casiva, Sr Support Engineer

    Meet Mari CasivaMeet Mari Casiva, the Heartbeat of RiskOptics' Customer-Centric Ethos!At RiskOptics, Mari Casiva stands out as a pivotal member of the Customer Support Team. Her commitment to enhancing customer experiences and her belief in the transformative power of support shape the core of her role. With a background in language education, Mari contributes exceptional communication skills, enriching every customer interaction with clarity and empathy. Mari's unique blend of educational expertise and technical expertise empowers her to not only address customer needs but to deeply understand and anticipate them. Her approach transcends mere problem-solving; it's about forging meaningful connections and adding significant value to each customer's journey with RiskOptics.  Mari’s transition to RiskOptics is a story of courage and curiosity. Despite lacking a technical background, her willingness to embrace new challenges and her dedication to continuous learning have been key to h

430
amanda.koski
Community Manager
3 months ago
amanda.koski
Community Manager
amanda.koskiCommunity Manager
published in General

Employee Spotlight: Fran Iarussi, QA Automation Engineer

 Meet Fran IarussiAt the heart of RiskOptics' innovative force is Francisco (Fran) Iarussi. As a QA Automation Engineer, Fran's dedication to quality and innovation has been instrumental since he earned his Software Engineering degree in 2021. His passion goes beyond his official duties, delving into the realms of sports, culinary arts, and global exploration.  In the Engineering department, Fran thrives in an environment brimming with collaboration and mutual support. Working alongside experienced colleagues, he delights in the daily joy and rich learning experiences this job provides. “The friendly atmosphere not only adds joy to each day but also creates a space where we can work together seamlessly, allowing creativity to flourish,” Fran says. This spirit of unity enables them to tackle daily challenges together, continually enhancing their collective expertise. Fran and his colleagues are at the forefront of technology, which fuels their drive for excellence. “The culture at RiskO

750
amanda.koski
Community Manager
4 months ago
M
Novice
mary.ayersNovice
asked in General

CSA IoT SCF V3 Mapping to SCF

Is there seed content available for V3 of CSA IoT SCF to the Secure Control Framework? 

1
marianneschrader
Employee
5 months ago
D
DebReady to engage in the Community
asked in General

How to Edit an 'Idea' submitted?

What are the steps to edit an ‘Idea’ created?

1
libby.bevin
Community Manager
5 months ago
W
wreiterReady to engage in the Community
asked in General

Interface for Adding Conditional Questions Does Not Match Knowledge Base

I am trying to add a conditional question in a ROAR questionnaire. In Zen, the instructions for doing this were clear, logical and easy to follow. However, in the ROAR knowledge base, the instructions for creating a conditional question do not reflect the options available in the questionnaire. Has anyone else had this issue? Am I missing something?Thanks!

1
amanda.koski
Community Manager
5 months ago
W
wvanderbijlReady to engage in the Community
asked in General

Lingering "open" tasks

Is there a best practice on how to  handle tasks and requests that do not get done, i.e. stay open and clutter up ToDo’s and object lists? Any suggestion welcome.

2
S
6 months ago
M
Novice
MarkKNovice
asked in General

Permissions for filters in SOR list view

Context: I have a user whose global permissions are contributor, but have editor roles for particular programs. When this user uses the SOR list views, they can see all the program objects for their assigned program, but when they attempt to filter by “owner” or “tag”, the option list does not populate.Example: While working within a project, this user should be able to see all the controls owned by a particular person (all controls are owned by a group, and the person is a part of specific groups). When they try to filter by a particular person, the drop down list of owners is entirely blank. When I try to filter by this same person, I have all persons and groups listed. My colleague, who is a global editor, sees what I see.

3
amanda.koski
Community Manager
6 months ago
M
Novice
MarkKNovice
asked in General

ZenGRC uptime status

Is there a service status page somewhere? I lost the ability to connect to ZenGRC and I don’t know if the service is down or if I have a routing problem somewhere.

3
M
Novice
6 months ago
M
Novice
mary.ayersNovice
asked in General

ZenGRC Self-Assessment Based on ISO 27001/2

Good morning! I would like to trigger an annual high-level self-assessment of the SCF (based on the ISO 27001 / 2 framework) out to several sub-companies within our parent company. Would it be best to leverage the Questionnaire module within ZenGRC or an Audit? I would like to be able to compare year to year responses by sub-company. I was also wondering if there is a template questionnaire available for the ISO Program. 

0
M
Novice
8 months ago
L
Novice
landon.callNovice
posted in General

Risk Register Questionnaire

I have a questionnaire template that will be used to send out to request a Risk Acceptance to an item on the Risk Register. I have a few questions/concerns on how this is implemented within ZenGRC. When requesting the questionnaire to be filled out an email gets sent to the user and no where in the email nor on the questionnaire does it state what risk the form is for. When the form gets mapped to the risk it grabs the name of the questionnaire template in this case (Risk Acceptance Request Form) this isn’t awful but would love a way to adjust that. There is a spot when sending the questionnaire to include a title/subject I can’t find where that is inserted into the process at all. Filling out that line doesn’t add it into the subject line of the email as the name would suggest, nor does it change the title of the form for the user when filling it out. What is this field for?!

1
libby.bevin
Community Manager
8 months ago
J
jchristensenReady to engage in the Community
asked in General

Integration with Jira Service Management

Howdy folks!Saw there is an integration with Jira Software Does this work with Jira Service Management as well? Or is that in development/unavailable?

1
gianna.satriano
9 months ago
R
rgottReady to engage in the Community
asked in General

ZenGRC ServiceNow Connector XML

Hello - I was evaluating setting up the ZenGRC to ServiceNow connector per the documentation here - . About halfway down the page it says to download the XML (config) file and import it into ServiceNow but the link is broken. Does anyone happen to have this XML file available or know how I can get it?

1
gianna.satriano
9 months ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
published in General

Risk Insiders Newsletter: 12 SIGNS of an effective cyber risk program

12 SIGNS OF CYBER RISK PROGRAM EFFECTIVENESS Companies are putting security measures in place, spending nearly 10% of IT budgets on them in 2022. What’s less clear (but top-of-mind for leadership) is… how effective are they? That’s where key performance indicators come in! Here are 12 common ones that can help you show the value of your program.→ GET SIGNS  NEW STUDY REVEALS SURPRISING RISK READINESS STATS Cyber threats are rising. How are your peers preparing for them? Surprisingly, many aren’t — even in hackers’ favorite sectors. For example, a new study found THIS hard-hit industry was least likely to evaluate third-party vendors. Can you guess which one? Check your answer (in just 2 minutes) here.→ CHECK ANSWER RISK INSIDERS BLOGInsiders’ Guide to Advancing Your CareerWant to level up by Q4? Risk Insider Chasserae Coyne’s proven strategies can help…   A Day in the Life of a Risk ChampionWhat sets Risk Champions apart? Get a glimpse at a day in their life to find out…   UPCOMING EVE

130
libby.bevin
Community Manager
9 months ago
R
rwalimohamedReady to engage in the Community
asked in General

Duplicating Controls

Hi - Is there a way to duplicate/copy controls in ZenGRC.  I basically would like to test the same control multiple times (1x for each in-scope application) ie - PW-APP1, PW-APP2, PW-APP3...

3
S
9 months ago
P
Novice
pnholeNovice
asked in General

Jira

I am trying to pull the Tasks data via the API. I cannot see date related to Jira issue  being retrieved via the API. Is that a limitation or I am missing anything here 

2
sbeiter23
Employee
9 months ago
P
Novice
pnholeNovice
asked in General

Is there a way to mark a vendor inactive?

I have a multiple vendors that we stopped using. I updated the stop date but on the report I also want to show active/inactive status of the vendor. Does anyone know how to achieve that? 

2
libby.bevin
Community Manager
10 months ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
published in General

Customer Spotlight: Sean McClanahan, Compliance Manager, SumTotal Systems

 Sean McClanahan’s life revolves around helping others. Whether he’s ensuring his organization remains compliant, supporting the Air Force as the Civil Air Patrol’s Chief of Staff for the Iowa Wing, or volunteer firefighting, Sean is constantly serving those around him. Fun Fact: The three residents of Sean’s home make up 10% of the population of his city of Dana, Iowa. Originally from Virginia, Sean moved to rural Iowa in late 2021 with his wife and mother-in-law. Sean has settled nicely into rural life, raising chickens and helping his neighbors with cattle roping practice for rodeos. With five grandchildren, a full-time job, two volunteer positions, and a YouTube channel, Sean certainly keeps busy. Becoming a Compliance Manager Formerly a deputy sheriff, Sean was drawn to work in information security and compliance because of his desire to keep others safe. Sean joined SumTotal Systems in September 2011 as part of their Cloud Operations team, but moved to the InfoSec team a year lat

2298
gianna.satriano
10 months ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
published in General

See you at RSA Conference 2023?

 Are you attending RSA Conference 2023? So are we! Members of the RiskOptics team will be there to showcase the ROAR Platform and look forward to seeing you. When and where?RSA Conference 2023Moscone Center in San FranciscoApril 24 - 27Visit the RSA Conference website here. Visit us at our booth! We’ll be located at South Expo, Booth 1951Click here for the South Expo exhibit hall map. The Exhibit Hours are:Monday, April 24th  —  4:30 pm - 7:00 pmTuesday, April 25th  —  10:00 am - 6:00 pmWednesday, April 26th  —  10:00 am - 6:00 pmThursday, April 27th  — 10:00 am - 3:00 pm Haven’t booked your tickets? Get discounts with the following codes: $150.00 discount on full Conference Pass, use code 52FCDRECIPR  Free Expo Pass, use code 52ERECIPRXP

180
libby.bevin
Community Manager
1 year ago
W
wvanderbijlReady to engage in the Community
asked in General

Is there a way to list or export comments on one or more objects?

Example: Date -  Object Title1 - Comment 1Date -  Object Title1 - Comment 2Date -  Object Title2 - Comment 1…Etc.

1
libby.bevin
Community Manager
1 year ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
published in General

Join us on April 19th - GRC's Top 3 Unfulfilled Promises

Are you joining us in two weeks for the GRC Insiders webinar, GRC’s Top 3 Unfulfilled Promises, to stay ahead of rapidly changing risks and regulations? Hear from our experts on Wednesday, April 19th, at 10:30 am PDT.Join us to learn about reframing risk, including how to:Transform your top challenges into opportunities Up your results (with fewer resources!) Regain board confidence by operationalizing risk Score a peek at the NEW capabilities of the RiskOptics ROAR PlatformREGISTER NOW

50
libby.bevin
Community Manager
1 year ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
published in General

ANNOUNCING: Reciprocity is now RiskOptics

Reciprocity is now RiskOptics! Reciprocity released ZenGRC in 2014, a groundbreaking GRC solution where we helped each other maintain compliance. As the world has changed over the last nine years, we now have to attack new and increasingly worrisome challenges head-on, such as cyber crime, ransomware, and even staff reductions and business continuity. The world has changed over the last nine years, and we want to change with it. As we shift our focus from a Compliance approach to a Risk-centric approach, we want our company to reflect this focus.  With that, we change our name to RiskOptics. At RiskOptics, our focus is to help you see risk differently. Risks are everywhere and with an optic into risk, you can understand your vulnerabilities, threats, and controls better. Our mission is to help you convert your risk into business advantage.  With RiskOptics and the ROAR Platform, we are providing a faster and more efficient way to support your business from a risk and compliance perspec

950
libby.bevin
Community Manager
1 year ago

Badge winners

Show all badges
Terms & ConditionsCookie settings
I'm not ready yet X