-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[M0-D11 follow-up] Classify the first client's vendors and subservice organizations
area:providersVendors, subservice organizations, and assurance reviewsVendors, subservice organizations, and assurance reviewspriority:P1Important after the critical path is usableImportant after the critical path is usabletype:discoveryProduct or domain decision required before implementationProduct or domain decision required before implementationStatus: Open.[M0-D10 follow-up] Set the first client's risk appetite and confirm the method
area:riskFindings, risks, vendors, and treatmentFindings, risks, vendors, and treatmentpriority:P1Important after the critical path is usableImportant after the critical path is usabletype:discoveryProduct or domain decision required before implementationProduct or domain decision required before implementationStatus: Open.[M0-D09 follow-up] Collect commitment source artifacts and draft the first lists
area:commitmentsService commitments, system requirements, CUECs, and CSOCsService commitments, system requirements, CUECs, and CSOCspriority:P1Important after the critical path is usableImportant after the critical path is usabletype:discoveryProduct or domain decision required before implementationProduct or domain decision required before implementationStatus: Open.[M0-D07 follow-up] Collect sample provider access exports for the first reviewed systems
area:access-reviewUser access review campaigns and remediationUser access review campaigns and remediationpriority:P1Important after the critical path is usableImportant after the critical path is usabletype:discoveryProduct or domain decision required before implementationProduct or domain decision required before implementationStatus: Open.[M0-D05 follow-up] Record the authoritative application-list source and first applications
area:applicationsApplication inventory, reviewed systems, and access scopeApplication inventory, reviewed systems, and access scopepriority:P1Important after the critical path is usableImportant after the critical path is usabletype:discoveryProduct or domain decision required before implementationProduct or domain decision required before implementationStatus: Open.[M0-D02 follow-up] Confirm the licensed criteria catalog supplier and license scope
area:controlsCriteria, controls, operation, and testingCriteria, controls, operation, and testingpriority:P1Important after the critical path is usableImportant after the critical path is usabletype:discoveryProduct or domain decision required before implementationProduct or domain decision required before implementationStatus: Open.[M0-D01 follow-up] Define the Privacy personal-information lifecycle backlog
area:productProduct definition and experienceProduct definition and experiencepriority:P1Important after the critical path is usableImportant after the critical path is usabletype:discoveryProduct or domain decision required before implementationProduct or domain decision required before implementationStatus: Open.[M0-D01 follow-up] Record the first client engagement facts
area:auditReadiness, auditor collaboration, and exportReadiness, auditor collaboration, and exportpriority:P1Important after the critical path is usableImportant after the critical path is usabletype:discoveryProduct or domain decision required before implementationProduct or domain decision required before implementationStatus: Open.[M0-D06a] Identify the first client's HRIS and roster export shape
area:workforceWorkforce roster, joiner-mover-leaver facts, and NHI ownershipWorkforce roster, joiner-mover-leaver facts, and NHI ownershippriority:P1Important after the critical path is usableImportant after the critical path is usabletype:discoveryProduct or domain decision required before implementationProduct or domain decision required before implementationStatus: Open.[M0-D25a] Decide retention of firm advisory material when a client offboards
area:tenancyClient organizations, tenant isolation, firm staff, engagements, and independenceClient organizations, tenant isolation, firm staff, engagements, and independencepriority:P1Important after the critical path is usableImportant after the critical path is usabletype:discoveryProduct or domain decision required before implementationProduct or domain decision required before implementationStatus: Open.[F1-D1] Ratify the initial independence rule set with the firm's quality-management partner
area:tenancyClient organizations, tenant isolation, firm staff, engagements, and independenceClient organizations, tenant isolation, firm staff, engagements, and independencepriority:P1Important after the critical path is usableImportant after the critical path is usabletype:discoveryProduct or domain decision required before implementationProduct or domain decision required before implementationStatus: Open.[T2-D1] Measure manual effort per source and rank candidate connectors
area:automationIntegrations and automated evidence collectionIntegrations and automated evidence collectionpriority:P2Valuable future capabilityValuable future capabilitytype:discoveryProduct or domain decision required before implementationProduct or domain decision required before implementationStatus: Open.