Session 1

Question 1

Overview / Context / Purpose

Answer 1

When discussing ControlMap with a partner for the first time, you should try to get some background on the partner’s relationship with compliance and/or compliance as a service.

• What spurred their decision to sign up for ControlMap?
• Is there an immediate compliance need for them or for one of their clients?

Many partners use their own company as their first tenant (what ControlMap calls companies created in the MSP portal), and this allows them to become more familiar with the tool in a way that benefits both themselves and their customers.

• What spurred their decision to sign up for ControlMap?
• Is there an immediate compliance need for them or for one of their clients?

The obvious answer here would be that they want an additional service offering, but there’s likely more to it than this.

• Have they experienced something like a breach that left them feeling vulnerable?
• Have they received a 3rd party risk assessment questionnaire from one of their vendors that made them question their own practices?
• Have they offered compliance as a service before and were unable to make it work for them?

Establishing this context is important for setting expectations.

Question 2

Compliance Timeline

Answer 2

Letting them know how long these things typically take.

Set some expectations on the timeline and how continuous compliance works.

If you’re unfamiliar with compliance, you may think that it just involves a mad rush of completing documentation and collecting evidence within a period of weeks or months, but this isn’t the case.

Some partners may think “I need to get certified for X framework ASAP because if I don’t, I’ll lose a deal!” or “We need to get this work out of the way so we can say it’s done and move on.”

Compliance is not a one-off project, and it needs to be treated as an ongoing effort. It’s more like housekeeping than graduating.

Question 3

MSP Portal

Answer 3

For the vast majority of ControlMap partners, the ControlMap MSP portal is their primary method for accessing ControlMap.

The first CM onboarding session should include an overview of the MSP portal and creation of the partner’s first tenant.

MSPs can log in to their MSP portal to create “tenants” (single instances of ControlMap) for their customers, and their own credentials are tied to the MSP portal as a one-stop shop to access their customers’ tenants and manage certain aspects of these tenants globally.

Question 4

Dashboard

Answer 4

You can view your active tenants in the Dashboard (default landing page) section in this “Card” view or the “List” view.

You can toggle between either view in the upper left corner of the Dashboard.

“Card” and “List” views contain the same information and the only difference is how this information is presented.

The “Source” is referring to how the tenant was created, either Manually or via an integration with a different system (Nodeware, CyberCNS, Scalepad, Breach Secure Now or Threatmate).

“Last Update” will be updated if/when any user activity has been recorded in the tenant.

”Compliance Health” is derived from the status of tasks in the tenant, and “Risk Level” is pulled from the metrics within the Risk Register section of the tenant.

“Frameworks” lists the frameworks that have been selected in the tenant.

”Pre-assessment” will only show progress if the active tenant was once a “Prospect” and the pre-assessment questionnaire in the portal was filled out.

Prospects are primarily created via Integrations as a way to pre-populate potential tenants with assets and information from the integration.

You can filter for prospects in the portal and can begin the pre-assessment by selecting “Start.”

Question 5

Frameworks

Answer 5

A collection of controls that is created and maintained by an organization.

The framework an organization chooses to follow will determine their overall scope of work when pursuing compliance.

Question 6

Quick Start

Answer 6

Your Setup Guide - A subcategory to the Framework.

This is how you can populate a Tenant with more relevant information, relative to the framework.

Question 7

Assessments (Deep Dive) (Gap Analysis)

Answer 7

Assessing where the biggest gaps of compliance are relative to a framework that has been selected.

This will give them an understanding of where they need to start.

Question 8

Vendors

Question 9

Risk Register

Question 10

Action Items / Findings