Controls can be approved in bulk as a way to expedite the building and development of an organization’s compliance program. While this is very appealing on many levels, consideration must be taken before pursuing this approach to control approval.
If users go down this path, understand that modifying individual ownership of the controls is not possible. You will have to assign a default owner of all the controls that were approved in bulk regardless of the system. Users can leverage the filtering function in the bulk approve model to provide some level of granularity and assignment, but it will always be limited to the available filters.
Bulk Approve Controls: From the Pending Control main page, click on the None tab from the Choose Grouping list at the top of the page. The controls will be listed in a grid form with all of the controls listed along with their associated information systems.
To Bulk approve ALL controls in the pending control area, Select the Red “Double Check” icon the top right corner of the grid, All of the controls in the grid on the first page and all subsequent pages are selected and will be included in your bulk approval.
PAGE SELECTION: If you select the small square box in the top left corner of the grid, ONLY THE CONTROLS THAT ARE LISTED ON THE SCREEN WILL BE APPROVED. Note that the red check box icon in the right corner of the screen changes to reflect the page selection versus all controls. Users can also select a SUBSET of controls from the list and bulk approve the selected controls. CyMetric will prompt you to confirm the fact that you want to approve the controls (the number is provided) and enable you to define the control owner for the controls you are approving.
USING FILTERS: Keep in mind you can filter this list and bulk approve only filtered controls. Filtering options include control identifier, control title, or Information System. (e.g. PE-, Human Resources). This will limit what is approved in bulk allowing for ownership segmentation by system, family or other data point.
Submit Bulk Approval: Click on the Bulk Approve Icon from the right side of the screen to approve the controls. CyMetric will prompt you to confirm the fact that you want to approve ALL the controls (the number is provided) and enable you to define the control owner for the controls you are approving. Select the default control owner from the drop-down list and select the Assign Owner and Publish xx Controls button to complete the process.
REMINDER: Control Owner: A control owner is the person or entity responsible for the implementation and management of a control. They will also take on responsibility of auditing/assessing the control to determine the effectiveness of the process/procedure defined by the control.
