Implementation Roadmap

Introduction

In this phase, you will customise the forms and filters of every module in the scope of your use case. 

Phase Instructions:

• On the left panel, click on "All Use Cases". Read the documentation and then complete tasks.
• On the left panel, click on the "Use Case" you previously selected. Read the documentation and then complete tasks.

All Use Cases

Required Learning:

• Customization course
• Filters course

Implementation Tasks:

• Identify which modules are in the scope of your Use Cases
• For each one of these modules, create a dummy item (Risk, Control, Policy, etc) to see what the creation form fields look like. We recommend clicking on "Save" just after the form loads so you focus alone on mandatory fields, leaving all non-mandatory fields empty and ready to hide them to simplify eramba.
• For each one of these modules, hide all fields you don't need. This is typically all non-mandatory fields.
• For each one of these modules, create fields and tabs that you miss. Before creating many fields, think about what ultimate purpose these fields will serve (reporting, notification, automation, etc).
• For each one of these modules, re-order fields across the form
• For each one of these modules, adjust the "All Item" filter by hiding and adding columns. Reducing the number of columns makes eramba load quicker and also keeps you distracted from non-relevant information.

Data Privacy

Required Learning:

• Policy Management course

Implementation Tasks:

• Enable or Disable the Policy Portal
• Define which role will perform reviews by creating custom roles and necessary and configuring review inheritance on Policies, Assets and Risks

Compliance

Required Learning:

• Policy Management course

Implementation Tasks:

• Enable or Disable the Policy Portal
• Define which role will perform reviews by creating custom roles and necessary and configuring review inheritance on Policies, Assets and Risks

Risk Management

Required Learning:

• Policy Management course
• Risk Management course
• Asset Management course

Implementation Tasks:

• Choose which Risk Module you will use (Asset, Third Party or Business)
• Define a Risk Classification schema
• Configure Risk Classifications
• Configure Risk Calculations
• Configure Risk Matrix
• Configure Risk Treatment
• Enable or Disable the Policy Portal
• Define which role will perform reviews by creating custom roles and necessary and configuring review inheritance on Policies, Assets and Risks

Online Assessments

• Required Learning:
  • Customization course
  • Filters course
  • Online Assessment course
• Implementation Tasks:
  • Define your OA strategy, in this phase in particular you will need to know the "Evaluation" aspect of your OAs.
  • Create Custom fields on the OA module so you can track the "Evaluation" aspect of your OAs. You might have more than one "Evaluation" method and for each one of them, you might need a custom field.
  • Create a custom filter on the User Management section to display user accounts that belong to your "Audience". This will help you to quickly differentiate OA accounts from normal ones.
  • Adjust OA Filters to show your evaluation strategy created in the step before. Also, remove all columns on the default "All Item" filter to keep things simple.
  • Adjust related entities' default filters to include OA count. This might include Third Parties, Third Party Risks, etc.

Incident Management

• Required Learning:
  • Incident Management course
• Implementation Tasks:
  • Configure Incident Stages