Menü aufrufen
Toggle preferences menu
Persönliches Menü aufrufen
Nicht angemeldet
Ihre IP-Adresse wird öffentlich sichtbar sein, wenn Sie Änderungen vornehmen.

Auditdurchführung/en: Unterschied zwischen den Versionen

Aus HITGuard User Guide
FuzzyBot (Diskussion | Beiträge)
Übernehme Bearbeitung einer neuen Version der Quellseite
Isan (Diskussion | Beiträge)
Die Seite wurde neu angelegt: „Furthermore, the semi-automatic revaluation of review objects can be initiated on this page. Find more on this here.“
Zeile 7: Zeile 7:
== Reviews ==
== Reviews ==


<div class="mw-translate-fuzzy">
Under "Audit management → Audit execution → <u>Reviews</u> | Objects of review | Gaps | Clarification needed" you find all the reviews of the management systems. This includes those reviews related to an audit as well as those that aren't linked. The display of a review is also independent of its state.
Under "Audit management → Audit execution → <u>Reviews</u> | Objects of review | Gaps | Clarification needed" you find all the reviews of the management systems. This includes those related to an audit as well as those that aren't linked.
</div>


It is also possible to create new reviews for audits here (gap analyses, review results, and protection needs analyses).
It is also possible to create new reviews for audits here (gap analyses, review results, and protection needs analyses).
Zeile 19: Zeile 17:
More on creating and editing reviews can be found [[Special:MyLanguage/Überprüfung|here]] (gap analyses and review results) as well as [[Special:MyLanguage/Schutzbedarf|here]] (protection needs analyses).
More on creating and editing reviews can be found [[Special:MyLanguage/Überprüfung|here]] (gap analyses and review results) as well as [[Special:MyLanguage/Schutzbedarf|here]] (protection needs analyses).


== Prüfobjekte ==  
<span id="Prüfobjekte"></span>
== Objects of review ==  


Unter "Auditmanagement Auditdurchführung Überprüfungen | <u>Prüfobjekte</u> | Abweichungen | Abklärungsbedarf" finden Sie alle Prüfobjekte, die im Zuge von Überprüfungen im aktuellen Managementsystem angelegt wurden.
Under "Audit management Audit execution Review | <u>Objects of review</u> | Gaps | Clarification needed", you find all the review objects that were created in the course of reviews in the current management system.


[[Datei:Auditdurchführung_Prüfobjekte.png|left|thumb|901px|Auditdurchführung > Prüfobjekte]] <br clear=all>
[[Datei:Auditdurchführung_Prüfobjekte.png|left|thumb|901px|Audit execution > Objects of review]] <br clear=all>


Durch Doppelklicken auf ein Prüfobjekt öffnet sich die Detailansicht. In dieser sehen Sie, wie das Prüfobjekt beantwortet wurde. Ebenso kann, wenn mehrere Versionen des Prüfobjektes vorhanden sind, angesehen werden, wie sich die Beurteilung des Prüfobjektes von einer Version zur nächsten entwickelt hat. Nur die Kopfdaten eines Prüfobjektes sind über diese Maske bearbeitbar. Das heißt, diese Maske kann nicht zum Beantworten eines Prüfobjektes verwendet werden.
Double-clicking on a review object opens the detailed view. Here, you can see how the review object was answered. Likewise, if several versions of the review object are available, you can view how the assessment of the review object has developed from one version to the next. Only the header data of a review object can be edited via this mask. This means that this mask cannot be used to answer a review object.


Weiters kann auf der Seite auch eine Teil-Automatische Neubewertung von Prüfobjekten initiiert werden. Mehr dazu finden Sie [[Special:MyLanguage/Schwachstellen#Teil-Automatische_Neubewertung_initiieren|hier]].
Furthermore, the semi-automatic revaluation of review objects can be initiated on this page. Find more on this [[Special:MyLanguage/Schwachstellen#Teil-Automatische_Neubewertung_initiieren|here]].


== Abweichungen ==
<span id="Abweichungen"></span>
== Gaps ==


Unter "Auditmanagement Auditdurchführung Überprüfungen | Prüfobjekte | <u>Abweichungen</u> | Abklärungsbedarf" finden Sie alle Abweichungen, die bei der Durchführung von Überprüfungen festgestellt wurden.
Under "Audit management Audit execution Reviews | Objects of review | <u>Gaps</u> | Clarification needed", you find all gaps that were identified during the performance of reviews.


[[Datei:Auditdurchführung_Abweichungen.png|left|thumb|900px|Auditdurchführung > Abweichungen]] <br clear=all>
[[Datei:Auditdurchführung_Abweichungen.png|left|thumb|900px|Audit execution > Gaps]] <br clear=all>


Anhand der optional einblendbaren Spalten "Maßnahme fehlt", "Zielwert fehlt", "Zielwert zu niedrig" lässt sich herausfinden, gegen welche Abweichungen noch nichts oder zu wenig unternommen wurde. Diese Abweichungen werden in der Übersicht auch mit einem Badge versehen. Hat eine Abweichung keinen Badge, heißt das also, dass versucht, wird die Abweichung zu beheben.
The optional columns "Measure missing", "Target value missing", "Target value too low" can be used to find out against which gaps nothing or too little has been done. These gaps are tagged in the overview. If a gap does not have a tag, this means that attempts are being made to correct the gap.


Sie haben hier weiters die Möglichkeit, Abweichungen einer Gefährdungslage zuzuweisen.
You also have the option here to assign gaps to a hazard situation


Durch Doppelklicken auf eine Abweichung öffnet sich die Überprüfung an der Stelle, wo die Abweichung festgestellt wurde. Hier können nun Maßnahmen und Kontrollen zur Abweichung festgelegt werden. Mehr dazu unter [[Special:MyLanguage/Prüffragen_beantworten| Prüffragen beantworten]].
Double-clicking on a gap opens the review at the point where the gap was detected. Here, measures and controls for the gap can now be defined. For more information, see [[Special:MyLanguage/Prüffragen_beantworten| Answer review questions]].


Optional kann man eine Spalte einblenden, die anzeigt, ob es sich um eine Prüffrage (aus einer Wissensdatenbank) oder ein Prüfergebnis (frei angelegt) handelt. Das gibt Experten die Möglichkeit, ihre selbst entwickelten Wissensdatenbanken dann um Prüfergebnisse zu erweitern, die bei Überprüfungen öfter extra hinzugefügt werden.
Optionally, it is possible to display a column that shows whether the line is a review question (from a knowledge base) or a review result (freely entered). This allows experts to then expand their self-developed knowledge bases by review results that are often added to reviews during the interview.


=== Abweichungen filtern ===
<span id="Abweichungen_filtern"></span>
===Filter gaps===


[[Datei:Abweichungsfilter.png|right|thumb|900px|Abweichungsfilter]]
[[Datei:Abweichungsfilter.png|right|thumb|900px|Abweichungsfilter]]


Mit dem Filter kann festgelegt werden, welche Art von Abweichungen angezeigt wird:
With the filter, it can be selected which type of gaps is displayed:
*negative: Prüffragen/Prüfergebnisse, die < dem Target Score bewertet wurden
*negative: review questions/results that were evaluated < the target score
*keine: Prüffragen/Prüfergebnisse, die = dem Target Score bewertet wurden
*none: review questions/results that were evaluated = the target score
*positive: Prüffragen/Prüfergebnisse, die > dem Target Score bewertet wurden
*positive: review questions/results that were evaluated > the target score


=== <span id="Zielreifegrad-Gewichtung"></span>Target Score Gewichtung===
<span id="Target_Score_Gewichtung"></span>
=== <span id="Target score weighting"></span><span id="Zielreifegrad-Gewichtung"></span>Target score weighting===


Was der Target Score ist und wo er eingestellt wird, finden Sie unter [[Special:MyLanguage/Managementsysteme#Aktiver Analysezeitraum | Managementsysteme]].
What the target score level is and where it is set can be found under [[Special:MyLanguage/Managementsysteme#Aktiver Analysezeitraum | Management systems]].
Überall dort wo Abweichungen vorkommen, gibt es eine zusätzliche Form der Sortierung: Die Target Score Gewichtung. Dies ist beispielsweise unter "Risikomanagement Schwachstellen Abweichungen" möglich.
Wherever gaps occur, there is an additional form of sorting: the target score weighting. This is possible, for example, under "Risk management Vulnerabilities Gaps".


Falls aktiviert, erfolgt die Sortierung von Schutzzielen anhand der Target Score Gewichtung. Je größer die Abweichung vom Target Score und je größer die Gewichtung des Schutzzieles ist, desto größer ist die Target Score Gewichtung: Target Score Gewichtung = Abweichungsgrad * Gewichtung des Schutzzieles.
If activated, the sorting of protection targets is based on the target score weighting. The greater the deviation from the target score level and the greater the weighting of the protection target, the greater the target score weighting: target score weighting = deviation level * weighting of the protection target.


Anmerkung: Eine Beantwortung mit "Nein" entspricht Score 1, "Teilweise" entspricht Score 3.
Note: A response of "No" corresponds to score level 1, "Partially" corresponds to score level 3.


Beispiele zur Veranschaulichung: Gewichtung des Schutzzieles: Mittel (3)
Examples for illustration: Protection goal weighting: Mean (3).
*Score der Abweichung = 2, Target Score = 4 =&gt; Abweichungsgrad = 2, Target Score Gewichtung = 2 * 3 = 6.
*score of deviation = 2, target score = 4 =&gt; Degree of deviation = 2, target score weighting = 2 * 3 = 6.
*Score der Abweichung = 4, Target Score = 4 =&gt; Abweichungsgrad = 0, Target Score Gewichtung = 0 * 3 = 0.
*score of deviation = 4, target score = 4 =&gt; degree of deviation = 0, target score weighting = 0 * 3 = 0.


[[Datei:Zielreifegrad Gewichtung anwenden.gif|left|thumb|900px|Target Score Gewichtung anwenden]]<br clear=all>
[[Datei:Zielreifegrad Gewichtung anwenden.gif|left|thumb|900px|Apply target score weighting]]<br clear=all>


== Abklärungsbedarf ==
<span id="Abklärungsbedarf"></span>
== Clarification needed ==


Unter "Auditmanagement Auditdurchführung Überprüfungen | Prüfobjekte | Abweichungen | <u>Abklärungsbedarf</u>" finden Sie alle Prüffragen/Prüfergebnisse, die im Zuge einer Überprüfung mit "Abklärungsbedarf" gekennzeichnet wurden.
Under "Audit Management Audit execution Reviews | Objects of review | Gaps| <u>Clarification needed</u>", you find all review questions/review results that were marked with "Clarification needed" in the course of a review.


[[Datei:Auditdurchführung_Abklärungsbedarf.png|left|thumb|900px|Auditdurchführung > Abklärungsbedarf]] <br clear=all>
[[Datei:Auditdurchführung_Abklärungsbedarf.png|left|thumb|900px|Audit execution > Clarification needed]] <br clear=all>


Diese Kennzeichnung ist in der Praxis notwendig, wenn Sie bei der Beantwortung einer Prüffrage noch nicht abklären können, wie die Frage zu beantworten ist. Dies kann vorkommen, wenn Sie beispielsweise noch eine andere Person hinzuziehen oder die Information anderweitig nachrecherchieren müssten. Im Anschluss an eine Reihe von Überprüfungen wird ausgewertet, welche Fragen noch recherchiert werden müssen. Genau dazu dient die Ansicht „Abklärungsbedarf“.
This label is necessary in practice if you cannot yet clarify how the question is to be answered when answering a review question. This can happen if, for example, you would need to consult another person or otherwise research the information. Following a series of reviews, the system evaluates which questions still need to be researched. This is exactly what the "Clarification needed" view is for.


Wird auf eine Prüffrage/Prüfergebnis doppelt geklickt, wird man zu dieser weitergeleitet.
If you double-click on a review question/result, you will be redirected to it.


Es ist ebenso möglich, eine Auflistung alle abklärungsbedürftigen Prüffragen/Ergebnisse über den Export Button zu exportieren (neben der Suchleiste). Dadurch erhält man eine einfach verwendbare Auflistung der abklärungsbedürftigen Prüffragen.
It is also possible to export a list of all review questions/results requiring clarification via the "Export" button (next to the search bar). This provides an easy-to-use list of the review questions that require clarification.


<div class="mw-translate-fuzzy">
<!--
== Overview of measures ==
== Overview of measures ==
</div>


Under "Audit management → Audit execution → Reviews | <u>Overview of measures</u>" you will find all measures that were created in the course of audits.
Under "Audit management → Audit execution → Reviews | <u>Overview of measures</u>" you will find all measures that were created in the course of audits.
Zeile 87: Zeile 89:
Double-clicking on a measure will take you to the measure.
Double-clicking on a measure will take you to the measure.


<div class="mw-translate-fuzzy">
[[Datei:AM Auditdurchfürhung Maßnahmenübersicht.png|left|thumb|900px|Overview of measures]] <br clear=all>
[[Datei:AM Auditdurchfürhung Maßnahmenübersicht.png|left|thumb|900px|Overview of measures]] <br clear=all>
</div>
-->

Version vom 6. Juni 2023, 12:40 Uhr

Under "Audit management → Audit execution" you find all reviews, review objects, gaps, and instances of clarification needed of the current management system.

Reviews

Under "Audit management → Audit execution → Reviews | Objects of review | Gaps | Clarification needed" you find all the reviews of the management systems. This includes those reviews related to an audit as well as those that aren't linked. The display of a review is also independent of its state.

It is also possible to create new reviews for audits here (gap analyses, review results, and protection needs analyses).

Double-clicking on a review will take you to it.

Audit execution > Reviews


More on creating and editing reviews can be found here (gap analyses and review results) as well as here (protection needs analyses).

Objects of review

Under "Audit management → Audit execution → Review | Objects of review | Gaps | Clarification needed", you find all the review objects that were created in the course of reviews in the current management system.

Audit execution > Objects of review


Double-clicking on a review object opens the detailed view. Here, you can see how the review object was answered. Likewise, if several versions of the review object are available, you can view how the assessment of the review object has developed from one version to the next. Only the header data of a review object can be edited via this mask. This means that this mask cannot be used to answer a review object.

Furthermore, the semi-automatic revaluation of review objects can be initiated on this page. Find more on this here.

Gaps

Under "Audit management → Audit execution → Reviews | Objects of review | Gaps | Clarification needed", you find all gaps that were identified during the performance of reviews.

Audit execution > Gaps


The optional columns "Measure missing", "Target value missing", "Target value too low" can be used to find out against which gaps nothing or too little has been done. These gaps are tagged in the overview. If a gap does not have a tag, this means that attempts are being made to correct the gap.

You also have the option here to assign gaps to a hazard situation

Double-clicking on a gap opens the review at the point where the gap was detected. Here, measures and controls for the gap can now be defined. For more information, see Answer review questions.

Optionally, it is possible to display a column that shows whether the line is a review question (from a knowledge base) or a review result (freely entered). This allows experts to then expand their self-developed knowledge bases by review results that are often added to reviews during the interview.

Filter gaps

Abweichungsfilter

With the filter, it can be selected which type of gaps is displayed:

  • negative: review questions/results that were evaluated < the target score
  • none: review questions/results that were evaluated = the target score
  • positive: review questions/results that were evaluated > the target score

Target score weighting

What the target score level is and where it is set can be found under Management systems. Wherever gaps occur, there is an additional form of sorting: the target score weighting. This is possible, for example, under "Risk management → Vulnerabilities → Gaps".

If activated, the sorting of protection targets is based on the target score weighting. The greater the deviation from the target score level and the greater the weighting of the protection target, the greater the target score weighting: target score weighting = deviation level * weighting of the protection target.

Note: A response of "No" corresponds to score level 1, "Partially" corresponds to score level 3.

Examples for illustration: Protection goal weighting: Mean (3).

  • score of deviation = 2, target score = 4 => Degree of deviation = 2, target score weighting = 2 * 3 = 6.
  • score of deviation = 4, target score = 4 => degree of deviation = 0, target score weighting = 0 * 3 = 0.
Apply target score weighting


Clarification needed

Under "Audit Management → Audit execution → Reviews | Objects of review | Gaps| Clarification needed", you find all review questions/review results that were marked with "Clarification needed" in the course of a review.

Audit execution > Clarification needed


This label is necessary in practice if you cannot yet clarify how the question is to be answered when answering a review question. This can happen if, for example, you would need to consult another person or otherwise research the information. Following a series of reviews, the system evaluates which questions still need to be researched. This is exactly what the "Clarification needed" view is for.

If you double-click on a review question/result, you will be redirected to it.

It is also possible to export a list of all review questions/results requiring clarification via the "Export" button (next to the search bar). This provides an easy-to-use list of the review questions that require clarification.