This procedure helps you complete an assessment campaign to obtain a declarative score for a policy across one or more perimeters of your organization.
When starting out on Tenacy, you have the option to launch an evaluation campaign to obtain your declarative score for one or more policies, across one or more perimeters. This is typically done on a "blank" perimeter (i.e., with no linked measures or actions yet).
🔎 To learn more about the different types of scores in Tenacy, you can read this article.
Setting up your evaluation campaign
To configure your campaign, please refer to this article.
Completing the evaluation
Whether you're a lead or a contributor, to complete the evaluation, go to: Contributions > Evaluations > Click on the relevant evaluation
Evaluation completion:
On the left, the policy is displayed, measure by measure.
In the center, you’ll find a short and detailed description of the selected measure.
On the right, the response area includes:
The compliance scale
A comment field
Fields to attach evidence, measures, and actions
We’ll select a compliance level and if this was set up, you can provide Implemented measures, not implemented measures, Improvement and implementation actions, Supporting proofs and comments
💡 This article explains the difference between implemented and not implemented measures.
💡Want to learn more about the different types of actions in Tenacy? Check out this article.
Once the evaluation is complete, don’t forget to submit it.
Validating the evaluation
Back in your evaluation campaign, navigate to:
Evaluations > In Progress > Click on your evaluation campaign
Submitted evaluation for a perimeter are listed under "Submitted". By clicking on it, you can approve or challenge submitted answers.
You can view the declarative score in "Evaluation's Results":
After completing the evaluation, head over to the Security Base: you've now started building it with the implemented and not implemented measures.
(view from the actual security base)
(view from the new security base)
All implementation and simple actions are automatically stored in the register created for this evaluation.
Viewing your declarative score
In addition to viewing the score directly within the evaluation, there are multiple ways to access it:
Via the Policies tab:
Search for the relevant policy, click on it, and filter by the desired perimeter.
Via a Dashboard:
You can monitor your score’s progression directly via a dashboard. See this article to learn how to set it up.