General tips

CISO Assistant is intended to be a multi-paradigm tool that suits everyone's background and approach to cyber-security programme organisation.

That said, here are some standard recommendations to get the most of it when you're just starting:

1. Map your organisation to the domains and perimeters (or create basic ones).

2. Add your users and assign them to groups (SSO and MFA are available even in the Community edition).

3. (recommended) Identify the assets to protect.

4. (recommended) Enumerate your existing capabilities and controls.

5. Define your baseline and focus on the basics — pick your controls and/or create new ones.

6. Get your actions implemented and reflect that on your audit progress.

7. Conduct a contextual risk assessment.

8. Share the insights with your organisation, review the priorities, and keep it alive.

9. Expand your coverage: periodic tasks, incidents, third-party risk, findings management.

10. Always keep focus on the actions and reflect their data on the other concepts.