The Compliance module provides evidence for different frameworks. Some evidence is related to roles within the organisation, for example CEO, CFO, security officer.
In the portal under Employee you can assign these roles. This data will be used in compliance reporting.
Here is how to define roles and assign these to employees:
- Go to Employees - All users (https://portal.lupasafe.com/Team)
- Select the single or multiple employees you want to assign a role to
- Click 'Tag multiple (filtered) employees, this will show a popup:
- type down the role, for compliance reporting it should start with
role:
- say you want to assign role:management, type it and press Enter, you should see this:
- Select any of the two options to assign this role tag:
- Press Add tags to confirm
In reporting these roles will be used in different People oriented controls, e.g. "A6.3 Information security awareness, education and training".
For checks Lupasafe verifies the presence of the following two basic roles:
role:management
role:security officer