The Compliance Assessment, also called Framework Translation, lets you reuse the work you have already done in one framework to populate another. Instead of answering a second framework from scratch, CyberHQ maps your existing responses across to the corresponding controls in your target framework, so you can report against multiple frameworks without duplicating effort. You run it from your Capabilities Assessment and review the results under Assessments > Compliance.
Running a framework translation
- Navigate to Assessments > Capability and select the Framework Translation icon to open the Import Framework Data drawer.
- Choose the framework to translate from and the framework to translate to. The translation takes your responses in the 'from' framework and maps them to the matching controls in the 'to' framework.
- Choose whether to also bring across Evidence (attachments) and Other Fields.
- Initialise the translation to generate the mapping.
Reviewing and confirming
- Review each mapped control, marking a control as viewed to track your progress.
- When you are satisfied, select Confirm to bring the data into the target framework.
Confirming overrides the existing scores in your Capabilities Assessment for the target framework, so review the mappings carefully before you confirm.
Your progress is saved as you go, so you can stop and resume at any time, and you can view initialised translations under Assessments > Compliance. The translation is performed by a model that converts control text into numerical representations to match controls across frameworks. It runs locally, so your data is not transmitted over the internet.
With a translation confirmed, the work you put into one framework carries across to another, so you can demonstrate compliance against several standards from a single set of responses.