Getting started

What the screen is for#

Each task reads what the app already holds: it is "Done", "Next step" or "To do" without you ticking anything.

Who can do what#

Anyone who can open the page reads the guide. Each task leads to the screen where it is done, and that screen's rights apply. Editing the organisation profile requires being a Jira administrator or a compliance manager.

Phases and tasks#

• Week 1, foundations: organisation profile (name, activity, sites, reused in the statement of applicability), choice of framework, naming the compliance managers.
• Month 1, set up: connect the assets, answer the assessment, link the Jira project for tickets, turn on the monitors.
• Month 3, audit ready: treat the risks, get the statement of applicability approved, run the internal audit, generate the audit pack.

Below the phases, the table "What you get" pairs what the auditor asks for (A.5.9, 6.1.2, 6.1.3, 9.2, 9.3) with the task that produces it.

Step by step#

1. Read "Your progress" ("N of 11 tasks").
2. Click the button of the proposed task ("Continue"), "Start" on another one, or "Review" on a finished one.
3. For the profile, "Fill in the profile" opens a form: name (required), activity, sites (one per line). If someone changed the profile meanwhile, the screen keeps your input read-only and reloads the profile.

What happens on opening#

On an installation where nothing is started, Home sends you to the guide once. After you have been elsewhere, Home opens normally. Until the guide is complete, the dashboard shows its progress and the next step.

Known limits#

• The guide does not say you are ready for certification: it says which tasks the app sees as done.
• The app cannot tell a first click on "Home" from opening the app: an empty installation opens on the guide in both cases.