When you start with Tenacy, it is recommended to begin by working on your security base to implement the security measures already present in your organization and thus materialize them within Tenacy.
💡 To learn more about how Tenacy works and its modules, see this article.
Associating a Policy with a Perimeter
To start instantiating security measures, you need to associate a policy with a perimeter.
🔎 For instructions on how to associate a policy, see this article.
Declaring Your Security Base
Once the policy is associated, simply go through all the security measures and determine whether they are already present in your organization.
Go to the Security Base module > filter by the relevant policy and perimeter.
Once in the perimeter, review the measures marked “to be handled” and specify whether each measure is already in place in your organization.
Ask yourself: “Is this measure currently implemented in my organization?”
If the answer is “Yes”: click “Implemented”
If the answer is “Partially”: click “Implemented”
If the answer is “No”: click “Not Implemented”
Measure Fully Implemented in My Organization
If the measure is fully implemented, adding it to your base allows you to also add controls (recurring tasks and indicators).
By default, Tenacy provides the ones from the Catalogue.
💡 You can always add your own indicators and recurring tasks by consulting the related articles.
Measure Partially Implemented in My Organization
If the measure is partially implemented, adding it to your perimeter confirms that the measure exists in your organization.
To highlight that it needs optimization, you can create an improvement action.
This action reflects that the measure’s efficiency is reduced.
💡 To better understand measure efficiency, see this article.
In addition to the improvement action, if controls are already in place in your organization, you can add indicators and recurring tasks directly to the measure.
Measure Not Implemented
If the security measure is not in place, click “Not Implemented”.
From there, you can decide whether to create an implementation action.
This action is necessary if you plan to start working on putting this measure in place in your organization.
💡 For a deeper understanding of the different types of actions in Tenacy, see this article.