Create your first organization and framework
Create your platform organization, invite the team to hold the compliance work, import the first frame and record the initial evidence.
Once you can connect to the platform, create the workspace that will host the compliance program and select the first framework your team wants to manage.
Before we begin
Secțiune intitulată „Before you start”You need:
- Access to a ZebraByteCloud or auto-hosted court
- Permission to create or administer an organization
- A compliance framework that the organization intends to follow
- Name of team members who will assist in holding the program
If you still do not have a working court, Choose an operating model.
Create your compliance workplace
Section entitled “Create your compliance workspace”-
Create an organization
After logging in, you create an organization for the company or business unit whose compliance program you want to manage. Compliance data, members, frameworks, risks, third parties, documents and audits belong to that organization.
-
Add the people responsible for the program
Invite teammates who will manage the platform or their own compliance work. Start with a small group that includes a compliance leader and engineering or security leaders responsible for implementing controls. Roles and permissions.
You can configure SAML single sign-on and SCIM provisioning when you are ready to centralize access.
-
Choose your first framework
Select the standard or regulation that drives your goal immediately – for example,SOC2,ISO27001, orGDPR. Starting with a framework, it is easier to establish ownership and sampling habits before expanding the program.
-
Import the framework
Open the frameworks area in the platform and import the framework you selected.
-
Review of controls and definition of measures
A control describes what needs to be done.A measure records the process, protection, or recurring activity of your organization that works to meet one or more controls.Connects existing measures where they already meet a requirement instead of duplicating work.
-
Assign owners and initial tasks
Prioritize the gaps that block the certification or compliance goal, then record the expiration dates and the evidence that each owner should provide.
-
Add the first proof.
Join a document, record, screenshot, export or other artifact that demonstrates that a measure works.
What to do next
Secțiune intitulată „What to do next”- It records the risks that matter most to the organization and links mitigations.
- Inventory critical vendors and begin third-party assessments.
- Import or write policies, and then assign review and approval works.
- Establish a recurring period for sampling and review of controls.
- Add other frames when the first program has clear owners and processes.