An alternative report dashboard for DFARS, SPRS and CMMC is under development for Isora GRC. The purpose is to make it easier to view how well you are in compliance with these regulations, and the dashboard is only relevant if you view the right types of assessments. The dashboard is not enabled by default.
What does the DFARS / CMMC Dashboard provide?
The top of the report provides at-a-glance views of how a given unit meets the controls laid out by DFARS (based on NIST 800-171), CMMC and SPRS.
The bottom half of the report allows you to drill down to the individual question level. You can also filter questions by category, weight value, and how they were answered. You can also use the search box to find questions by key words.
How to Enable the DFARS / CMMC Dashboard
The dashboard isn’t installed by default. A lot of configuration is necessary to enable the DFARS / CMMC Dashboard, and it can’t be set up by customers directly. First, the question sets must be set up to use the correct answer response groups. Most of the questions will use the managed CMMC answer response group. This response group uses an implementation scheme supporting partial implementation. Additionally, the questions in the set all have to be tagged to support the CMMC frameworks. Every question is tagged with its own framework and section. Some questions have multiple tags because they are part of more than one framework (for example, everything that’s in CMMC Level 3 is also in Levels 1 and 2).
(See also: What is question tagging & what are policies? )
After the new dashboard is installed, you will be able to use the DFARS / CMMC dashboard to view the results for new assessments using the tagged questions. It’s unlikely that you would be able to use the dashboard to view data from older assessments. You can still use the default Comparative dashboard to view the results of old and new organizational assessments.
The DFARS / CMMC dashboard is under development and new features are still being added.
If you would like to set it up, contact support@saltycloud.com.