Sections are categories that exist within a security framework that divide the framework into more manageable areas. For example, if a framework is called Enterprise Physical Security, some of its sections could include Physical Security or Fire Safety. Once a framework has been created and had sections added to it, those sections must then be updated.
To update a section:
Log into a user account that's been added to the Security Assessment Team user group.
Click the dropdown in the nav bar > Library.
The nav bar.Navigate to the Security Audit Frameworks tab.
The Security Audit Frameworks tab.Click a framework in the Active state to open the Framework Review form.
The Framework Review form.Scroll down to the Sections field and click the Section you wish to update to open the Section Review palette.
The Section Review palette.Optional: Edit the Section Name and Description fields as needed.
In the Details section, adjust the value in the Weighting field to reflect how much of a percentage of the total framework this section should take up. The total weighting of all sections in each framework should equal 100%.
In the Sub Sections section, an existing sub section can be added by typing its name in the search bar and selecting it. To create a new sub section from scratch, click + and fill in the required fields. See the Update a Sub Section article for more detailed information on filling out this form. Click X next to an existing sub section to remove it from the section.
Sub Sections within a security frameworkIn the Questions section, an existing question can be added by typing its name in the search bar and selecting it. To create a new question from scratch, click + and fill in the required fields. See the Review a Requirement article for more detailed information on filling out this form. Click X next to an existing question to remove it from the section.
The Questions section.
