👨💼 This article is for global and local pilots in charge of a perimeter's security base.
An implementation action lets you plan and track the deployment of a security measure not yet implemented on a perimeter. By creating this type of action, you signal that work is underway to implement the measure.
This action progressively improves the risk treatment of the relevant perimeter, in proportion to its progress. The compliance coverage score, on the other hand, only improves once the action is completed and the measure is actually implemented.
There are three ways to create an implementation action:
directly from the Security Bases module, starting from the relevant measure
from the Action Plans module, by creating the action in an existing register
from the Catalog, starting directly from the measure to implement
Create an implementation action from Security Bases
⚠️ The relevant measure must not yet be implemented in the perimeter's security base. It is recommended to create the action plan in the Action Plans module beforehand, if it does not yet exist.
Step 1: Access the security base
In the left menu, go to the Security Bases module. Filter on "All measures" or on a policy, then select the desired scope. Then click on the measure you want to implement to open its modal.
Step 2: Add an implementation action
From the measure modal, click on "Add an action".
A panel opens on the right. Fill in the following information, then click "Create the action":
Action name: title of the action to be carried out
Action plan: the register to link this action to
Owner: the user or group responsible for carrying it out
⚠️ Only one implementation action can be created per measure. If an implementation action already exists on the measure, the button will not be available.
Step 3: Complete the action information (optional)
When creating from the Security Base, some information is not filled in: priority (set by default to the level on the scale corresponding to a value of 50 out of 100), description, status and subtasks. To complete them, click on the shortcut icon visible from the measure to open the action in a new tab.
💡 If the action benefits multiple perimeters, you can configure beneficiaries directly in the action editor, from the "Beneficiaries" tab. When the action is finalised, the measure will be implemented across all beneficiary perimeters.
Create an implementation action from Action Plans
⚠️ An action plan (register) must exist. The relevant measure must not yet be implemented in the perimeter's security base. Creating actions in the "All actions" register is not possible: you must start from a specific register.
Step 1: Access the Action Plans module
In the left menu, go to the Action Plans module. If no plan exists yet, create one by clicking "Add a plan".
Step 2: Add a new action of type "Implementation"
In the selected action plan, click on "+ Add an action". In the modal that opens, select the action type "Implementation".
💡 The 3 available types are: Implementation (deploying a measure not yet consumed), Improvement (increasing the efficiency of an already implemented measure), Simple (not linked to a measure). Choose Implementation here. For more details on how to choose between these types, see this article.
Step 3: Link the action to a measure and a perimeter
In the "Perimeter" field, select the relevant perimeter. In the "Measure" field, search for and select the measure you want to implement.
Step 4: Fill in the action information
Complete the form fields:
Title: name of the action (e.g. Deploy MFA on administrator accounts)
Status: current state of the action
Perimeter: perimeter the action is linked to
Manager: user or group responsible for carrying it out
Priority: priority level of the action, set to 50 out of 100 by default
Start / end date: optional at creation. If filled in, the action automatically switches to "Planned" status
Step 5: Confirm the creation
Click "Save" to create the action. It appears in the action plan with the status "To plan" (or "Planned" if dates have been filled in).
Create an implementation action from the Catalog
⚠️ The relevant measure must not yet be implemented in the perimeter's security base.
Step 1: Access the Catalog
From the solution menu, via the gear icon ⚙️, go to the Catalog, then the "Measures" tab.
Step 2: Add an implementation action
Hover over the measure you want to implement and click the "Add an implementation action" icon that appears at the end of the row.
Step 3: Fill in the information and confirm
Fill in the information needed to create the action: perimeter, any beneficiaries, the action plan (register) to link it to, manager, and status. Then click "Create".
💡 Once the action is created, the measure automatically appears as "not implemented" in the relevant perimeter's security base, as with the two other creation methods. Once the action is finished, the measure status automatically switches to "Implemented" in your security base.
Frequently asked questions
How many implementation actions can I create for the same measure?
Only one at a time. If an implementation action already exists on a measure, you cannot create a second one until the first is completed or cancelled.
What is the default priority of an implementation action?
The default priority corresponds to a numeric value of 50 out of 100, which is displayed as the priority scale level containing that value (for example "Medium", depending on the scale configured for your context). It can be adjusted at any time from the action's edit view, by selecting another scale level. You'll find more details about scales in this article.
What happens if I fill in start and end dates at creation?
The action automatically switches from "To plan" status to "Planned" status.
What is the difference between an implementation action and an improvement action?
An implementation action targets a measure not yet implemented: once completed, the measure becomes implemented. An improvement action, by contrast, targets a measure that is already implemented, in order to increase its efficiency.
🔎 To learn more about the different types of actions, see: The 3 different types of actions.