Description
The control catalog and threat assessment wizard are immensely beneficial for users authoring in Layer 2. Creating wizard assistants for Layer 3 Policy and Security Policy would support users authoring. The prompts should be structurally aligned with the controls catalog and threat assessment wizards.
Proposed Solution
Create a wizard assistant for policy writing that addresses both basic policy and security policy. The solution will allow a user to choose their policy type and incorporate their risk register knowledge.
The policy wizards must be aware of the "functional inheritance model." The wizard will direct the user through authoring policy with risk appetite considered. Ensure Step-by-step authoring flow that adjusts recommendations based on the organization's defined risk appetite.
Controls catalogs can be referenced with the threats mitigated.
Discussion
- Risk catalog may be ingested by the wizard to review the threats associated with risks and their severity.
Related Issues
Description
The control catalog and threat assessment wizard are immensely beneficial for users authoring in Layer 2. Creating wizard assistants for Layer 3 Policy and Security Policy would support users authoring. The prompts should be structurally aligned with the controls catalog and threat assessment wizards.
Proposed Solution
Create a wizard assistant for policy writing that addresses both basic policy and security policy. The solution will allow a user to choose their policy type and incorporate their risk register knowledge.
The policy wizards must be aware of the "functional inheritance model." The wizard will direct the user through authoring policy with risk appetite considered. Ensure Step-by-step authoring flow that adjusts recommendations based on the organization's defined risk appetite.
Controls catalogs can be referenced with the threats mitigated.
Discussion
Related Issues