Updates of review objects

If anything changes from one version of a knowledge base to the next, this could warrant the revaluation of existing review objects. For example: if new review questions were added for a norm or significant changes were made to an existing review question, this could lead to a revaluation. To maintain an overview of which review objects need to be updated, HITGuard offers the possibility to update all review objects linked to a knowledge base to its newer version.

Under "Administration → Knowledge bases | Updates of review objects | Knowledge base merging" all updates of knowledge bases created in the current management system are shown and it is possible to create further updates there.

Create update

To create an update, click the "Plus" button under "Administration → Knowledge bases | Updates of review objects | Knowledge base merging". This opens the "Create update" interface.

All knowledge bases offering the update of review objects are up for selection in this view. That means that all such knowledge bases are displayed whose review objects are contained in completed reviews. Once you have selected a knowledge base, you need to then determine from which onto which version you wish to update.

Create an update

Finally, you need to decide which review objects to update. Skipping versions is possible here. That means that when updating from version 1 to 2, all review objects created with version 1 are offered for selection, but not those created with version 2. However, if you update from V1 to V2.1, then all review objects create with version 1 or2 are offered for selection. In short, only relevant review objects are offered. Note also that if no knowledge base topics in the new version contain any old review objects, those will also not be offered.

Once you have made your selection, click "Update". Following this, revaluations must be created for the review objects. This can be done, for example, by planning re-audits in the audit planning with reviews containing these specific review objects. You can also create a revaluation directly in the menu item "Risk management → Vulnerabilities" by creating a new gap analysis and choosing the revaluation of review objects in step 2.

Progress of an update

Once you have one or more updates, you can see their progress on the "Updates of review objects" page. Clicking on an update opens its details page. Here, you can see more information about the selected update: from which to which version you are updating, which review objects must be updated, and their revaluation/reassessment status.

An update can be in one of three states:

1. Not yet created:
   • A revaluation is necessary for at least one review object.
2. Created:
   • All revaluations have been created, but not all have been done yet.
3. Closed:
   • The update has been completed, meaning all revaulations were done.

Update details

Revaluate review objects

To complete an update, revaluate the affected review objects. To revaluate them, create a new gap analysis in "Risk management → Vulnerabilities | Reviews | Review objects | Gaps | Clarification needed".

Find more on how to create a gap analysis and revaluate review objects here.