Skip to main content

Use functions in an evaluation

It is possible to assign one or more functions to a user. But what is it for and how do you use it?

Updated over 3 months ago

What is a fonction?

The function allows, as its name suggests, to associate the user with his function in the company.

These functions will be particularly useful during evaluation campaigns: it is common to have in a general policy measures that concern IT, but also HR, Legal, Communication, etc. They make it possible to distribute the different controls of a policy between these different populations.

Where to find and define the functions?

The functions can be found in: ⚙️Wheel > Functions

  • To create a function: "Add a function" button.

  • To modify a function, for example change the associated users and groups: click on the corresponding line and modify the parameters.

How to use functions in evaluations?

Assignment of functions to users and groups

You can assign users and groups directly in the "Functions" tab, as seen above.

You can also assign a function to a user in the ⚙️Wheel > Users > Click on the user concerned > "Functions" field.


Linking functions to policies controls

⚠️ It is possible to associate functions with private policy controls only.

To link a function to a control:

🔎 The association is made for each control.

1. Policies tab > "Manage all policies" button > Click on the chosen policy.

2. Click on the "Modify" icon at the end of the line > "Functions" field: associate 1 or more functions.


Use of the function in an evaluation

🔎 During an evaluation on the policy, only the following controls are presented to a user:

  • Those that have no associated function

  • Those whose user has the associated function (directly or via a group of which the user is a member).

Example of evaluation with functions

In my "Statement of Applicability" policy, I have associated controls 5.1.1, 5.1.2, 9.1.1, 9.2.3, 9.2.5, 12.2.1, 12.3.1 (in yellow) to the function "Business" and other controls to the HR function.

My user profile is associated with the business function (Identifier "_BUSI")

In the evaluation, in the "Statement of applicability" policy, I only see the controls associated with the business function (those highlighted in yellow above).

Did this answer your question?