- Certified project team with subject matter expertise in project management, compliance, and CM-GRC administration as well as initial setup, including deployment of single GRC server instance, customized branding, standards and controls selections, and control and workbook assessment assignments.
- CM-Agent Deployment assistance.
- Partnership with company’s main point of contact for completion of required technical workbooks, controls assessments, and scans.
- Delivery of reports including: POAM Workbook, Controls Assessment, and Technical Risk Treatment Plan. There is also a Custom Action Plan review with a certified subject matter expert.
- Quarterly (or other reporting frequency if applicable) environmental scans with updated reports and updated Action Plan review based on environmental changes and current threat landscape.
Compliance Manager
Learn more about our Compliance Manager services!
for more
Services Include:
Engagement Process Weeks 1-2
Week 1: Prep Call – The Engagement will begin with a call where you will be introduced to the team and given an overview of the Engagement Process. We will review your customer profile to ensure all information required for the assessment process is documented. We will also discuss the technical details needed to gain access to the environment for deployment of agents and CM-GRC portal access.
Week 1-2: CM-GRC Setup and Data Collection and Workbook Generation and Assignments – The next step is to set up our compliance manager tool and its related data collectors. You will be partnered with one of our certified CM-GRC administrators for the provisioning of the site, branding (if required), standards and controls selections, deployment of GRC server and agents, and kicking off environmental scans. After data collection, our team will generate the required workbooks and controls questions, then assign them to the correct role group members for completion.
Engagement Process Weeks 2-8
Week 2-7: Workbook and Control Assessment Completion – During this phase, you need to complete the assigned workbooks and controls questions. Our project coordination team will send reminders to participants to keep the engagement on track.
Week 7-8: Report Generation – At this point our team will generate the following reports for hand off to our subject matter expert for analysis: Plan of Action and Milestones, Standard Requirements Assessment Report, Controls Assessment Report, Technical Risk Treatment Plan, and Assessors Checklist.
Week 8: SME Assessment and Delivery Meeting – Our subject matter expert will review all reports and develop a customized Prioritized Action Plan for you based on customer industry and current threat landscape. At the end of each assessment period, we will hold a delivery meeting where our subject matter expert will walk you through findings and the Prioritized Action Plan, to prepare you for delivery to your customer.
Pre-Requisites for Successful Engagement
What's Required?
- We will require administrative access to your environment and CM-GRC portal to perform initial and ongoing scans in your environment.
- An active agreement with Document Solutions.
- Minimum Server Requirements (1 server installation required per site):
- Intel i5 processor
- Windows 10 Pro or Windows 2016 Server and up
- 2 GB Available RAM
- 5 GB Disk Space
Network connectivity/Internet access. CM-GRC Tools, should configure the firewall rules on their networks to enable access to the following CM-GRC Tools URLs:
- gatekeeper.rapidfiretools.com
- go.rapidfiretools.com
- go-eu.rapidfiretools.com
- wcflb.rapidfiretools.com
- wcflb-eu.rapidfiretools.com
- api.ndglue.com
- The CM-GRC server and agents require access to Port 443