Updates of review objects

Knowledge bases are regularly updated. Sometimes there are major changes, for example when new review questions are added or old review questions change significantly. In such cases, it may be necessary to update the review objects that were previously created with the old version of the knowledge base. To do this, you can use HITGuard to get an overview of the changes and label these review objects accordingly. You do this by creating an 'Update of review objects' entry.

Under "Administration → Knowledge bases | Updates of review objects | Knowledge base merging" <ou see all created updates of knowledge bases in the current management system. You can also create new updates here.

Create update

To create an update, click the "Plus" button under "Administration → Knowledge bases | Updates of review objects | Knowledge base merging". This opens the "Create update" interface.

All knowledge bases offering the update of review objects are up for selection in this view. That means that all such knowledge bases are displayed whose review objects are contained in completed reviews. Once you have selected a knowledge base, you need to then determine from which onto which version you wish to update.

Finally, you need to decide which review objects to update. Skipping versions is possible here. That means that when updating from version 1 to 2, all review objects created with version 1 are offered for selection, but not those created with version 2. However, if you update from V1 to V2.1, then all review objects create with version 1 or2 are offered for selection. In short, only relevant review objects are offered. Note also that if no knowledge base topics in the new version contain any old review objects, those will also not be offered.

Once you have made your selection, click "Update". Following this, revaluations must be created for the review objects. This can be done, for example, by planning re-audits in the audit planning with reviews containing these specific review objects. You can also create a revaluation directly in the menu item "Risk management → Vulnerabilities" by creating a new gap analysis and choosing the revaluation of review objects in step 2.

Progress of an update

Once you have one or more updates, you can see their progress on the "Updates of review objects" page. Clicking on an update opens its details page. Here, you can see more information about the selected update: from which to which version you are updating, which review objects must be updated, and their revaluation/reassessment status.

An update can be in one of three states:

Not yet created: A revaluation is necessary for at least one review object.
Created: All revaluations have been created, but not all have been done yet.
Closed: The update has been completed, meaning all revaulations were done.

Revaluate review objects

To complete an update, revaluate the affected review objects. To revaluate them, create a new gap analysis in "Risk management → Vulnerabilities | Reviews | Review objects | Gaps | Clarification needed".

Find more on how to create a gap analysis and revaluate review objects here.