Skip to main content
Framework Readiness

Tracking and managing the readiness of frameworks, controls & requirements

Updated over 8 months ago

HERE'S WHY

Readiness provides an at-a-glance assessment of the status of each framework and is the active tracking and validity check for all in-scope framework requirements and controls.

BEFORE DIVING IN

Readiness applies to Frameworks, Requirements, and Controls, with the readiness of one dependent on the other.

HERE'S HOW

A Framework's readiness is measured on the 'Dratameter' and is calculated by the number of in scope requirements that are 'Ready' out of the total number of in scope requirements.

Additionally, each framework calculates the total number of ‘In-scope Controls’ it has. The ‘In-scope Controls’ calculation includes the total amount of controls that are mapped to any requirement that has been marked in-scope.

A Requirement is considered 'Ready' if it is:

  1. Mapped to at least one control that is ready

  2. Not mapped to a control that is not ready

Examples:

  • If a requirement is mapped to two controls, one is ready and one is not, the requirement will not be ready

  • If a requirement is not mapped to any controls, it is not ready

  • If a requirement is mapped to multiple controls and all controls are ready, then the requirement is ready

You can filter requirements by their readiness status —'Ready' or 'Not Ready'—to gauge what needs your attention.

A Control is considered 'Ready' if:

  1. All mapped evidence is valid

  2. Is not mapped to any invalid evidence

Valid evidence is any of the following:

  • Test in a PASSING state

  • All mapped Policies have an approved version

  • Mapped Evidence Library item that has not exceeded its renewal date

  • Mapped Miscellaneous Evidence (file or URL) that has not exceeded its renewal date

Invalid evidence is any of the following:

  • Test in a FAILING state

  • Mapped Policy that is not approved

  • Mapped Evidence Library item that has exceeded its renewal date

  • Mapped Miscellaneous Evidence that has exceeded its renewal date

Additionally, if a control is not mapped to any evidence at all, it is not ready.

You can filter controls by their readiness status—'Ready' or 'Not Ready'—to gauge which controls need your attention.

Did this answer your question?