Frameworks allow you to create a pre-defined project structure that will help you achieve a set outcome.
For example, you might have a framework for other information security standards like NIST. Creating a project from that framework would lay out the requirements of NIST and give you a place to document how you met them, just like the policies and controls area for ISO 27001 that your platform came built with.
Alternatively, you might have pre-built frameworks for common HR tasks like Recruitment or Induction that conform to you polices in section A.7 of the 27002 Annex. These frameworks help guide the hiring manager though the key information security-related tasks of hiring e.g. character and criminal records checks, setting the user up on systems and inducting them in the company’s information security policies.
Creating a project using a Framework
You can create a Project using a pre-built framework for repeatable work with colleagues and partners. To see the frameworks that are available to your organisation, click Projects in the Work menu and then ‘Create new Project’. On the right-hand side of the page, you’ll see a list of all the frameworks you can use.
Any frameworks created by your organisation will be listed first, while any frameworks created by ISMS.online or our partners will be listed below them. You can use the search field to find frameworks by name (e.g. searching for “recruitment” will show you the HR-focused frameworks for recruitment).
Hovering over a framework name will tell you more about what it does and whether it includes pre-populated notes, documents and tasks.
Clicking a framework will begin the creation process for a new project based on that framework.
Customising a project created from a Framework
Even though a framework will pre-populate the Phases, Deliverables and Activities for you, just like any other Project in ISMS.online you can edit, delete or create new ones to suit your needs.
You can learn more about editing the Project structure here.