Recommendations

Introduction

A suggestion on how to improve an Organization’s security program. Usually in response to an Observation.

Recommendation Details Page

Status

The recommendation status is used to determine whether or not the recommendation was used to improve an organization's security. There are two status types, these types are Resolved, and Unresolved. These status types represent whether the recommendation was used or not.

Module

The module section is used to track the module that the recommendation is linked to.

Rating

Each recommendation has its own weight affecting the organization. The rating may be used to identify the significance of a specific recommendation that is being resolved.

Difficulty

The difficulty section is used to inform the user of how difficult the recommendation may be to resolve.

Notes

Recommendation notes may be used to record important information that is not included on the details page. The notes section may also be used to record user concerns and questions regarding the recommendation.