Implementation Roadmap

Introduction

In this phase, you will identify data (Policies, Risks, etc) and upload it to eramba. Is CRUCIAL that you input real data, a system with non-accurate data produces non-accurate information.

Phase Instructions:

• On the left panel, click on the "Use Case" you previously selected. Read the documentation and then complete tasks.

Risk Management

Required Learning:

• Asset Management course
• Risk Management course
• Policy Management course
• Internal Controls course
• Project Management course
• Exception Management course
• Online Assessments are optional if you would like to use online questionnaires for Risk identification

Implementation Tasks:

• Identify Risks
• Identify Risk Solutions
• Create Risk Inputs (BUs, Assets, Third Parties, etc.)
• Create Risk Solutions (Policies, Controls, Exceptions & Projects)
• Create Risks

Optionally:

• Use CSV Imports to create Solutions, Inputs and Risks quicker

Compliance Management

Required Learning:

• Compliance Management course
• Policy Management course
• Internal Controls course
• Project Management course
• Exception Management. course

Implementation Tasks:

• Identify Compliance Requirements
• Create or Use our existing Packages
• Import Compliance Packages
• Optionally, Configure Mappings in between packages
• Identify Compliance Solutions (Policies, Controls, Exceptions & Projects)
• Create Compliance Solutions (Policies, Controls, Exceptions & Projects) 
• Associate Solutions with Compliance Requirements

Optionally:

• Use CSV Imports to create Solutions and map them to Compliance Requirements

Incident Management

Required Learning:

• Incident Management course

Implementation Tasks:

• Define a Process to Identify Incidents
• Create Incidents
• Analyse Incidents

Online Assessments

Required Learning:

• Online Assessment course

Implementation Tasks:

• Define your OA questionnaire strategy
• Create OA questionnaires using Spreadsheets, you can use our templates as inspiration
• Upload them to the OA module in the Questionnaires tab
• Create a test OA, without authentication to test how the questionnaire formatting and logic work out
• Repeat the previous steps until your questionnaires work as intended
• Delete all OAs you created to test
• Create all OAs required, this may vary based on your OA strategy. Do not start them yet, this will be done at the Rollout phase of the implementation to include notifications, etc.

Optionally:

• Use CSV Imports to create OAs

Awareness Programs

Required Learning: 

• Awareness Programs course

Implementation Tasks:

• Define and create the Awareness Program content
• Define Awareness Program Frequency
• Define the number of Awareness Programs needed
• Create Awareness Programs, make sure the audience groups have the dummy account inside we will need that to test them
• Enable Demo mode on your programs to test them
• You can now start the program, the day after you will receive emails to your dummy account inviting you to complete the training
• Complete the training following the email instructions, this is a great time to check if the email also looks ok
• If there is any modification needed on the awareness program (email, settings, content, etc.), pause the awareness program and update it. When modifications are completed, reset counters
• Once all is tested and all seems good, leave the program in pause mode