Set a System Sub-Control to "Non-Standard"

Introduction

The Implementation Rating of a Non-Standard Risk Control is calculated separately from the Organization-level Risk Controls and carries it’s own Cost that factors into the Return on Investment calculations.

Step-By-Step Guide

1. Go to “Systems” page

2. View details of target System

3. Expand “Controls” and expand desired Control Category

4. Once expanded, all Control Categories have a list of Sub-Controls

5. Expand the desired Sub-Control

6. Toggle “Non-Standard” to the true position

7. Fill in the Cost of Control and Implementation Rating

8. Add text in the Implementation Details box explaining why this control is non-standard