An assessment campaign can be created in two ways in Tenacy: in standard mode or in expert mode. This choice determines where the actual configuration of your assessment is located (scale, actions, measures, comments, evidence, not-applicable) and therefore where to go to check it, both before and after the campaign is launched.
💡 Don't know yet how to create your campaign? See Configuring an assessment campaign for standard mode, or Configuring an assessment campaign in expert mode for expert mode.
Two modes, two configuration logics
In standard mode, a campaign is used to carry out a declarative compliance assessment: it is not intended to implement security measures or collect actions. It is in the scale configuration step of the creation wizard that you choose to allow not-applicable, to collect comments, and to collect evidence.
In expert mode, the campaign's objective is to implement security measures on a security baseline (the set of security measures implemented for a perimeter) and to collect actions in an action plan. The wizard therefore asks you, in addition to the standard mode parameters, to choose an action plan dedicated to this purpose.
⚠️ If your campaign targets suppliers and/or applications, prefer standard mode: these perimeters do not have a security baseline and therefore cannot receive measures.
Why the scale must be properly configured in both expert and standard mode
The assessment scale (the set of response levels offered to the assessor, each with a value, a color, and an icon) defines, for each response level, whether the association of an action is forbidden, possible, or mandatory — and the same applies to the association of a measure, the addition of evidence, and comments. This configuration is saved on the scale itself, from ⚙️ > Scales.
In standard mode, the campaign configuration overrides the configuration of the scale itself. So if your scale forbids adding evidence but in the campaign configuration you want to collect evidence, the created campaign will request evidence.
In expert mode, on the contrary, Tenacy applies what is configured in the selected scale:
If a level allows the association of actions and measures, you will be able to add them during the assessment.
If the scale does not allow them, you will not be able to add them, regardless of the expected outcome of your campaign.
⚠️ Check the levels of your scale (association of actions and measures: forbidden, possible, or mandatory) before launching a campaign in expert mode. Once the campaign is launched, the scale can no longer be modified.
🔎 To understand in detail how scale levels work, see Understanding and configuring scales.
Checking the configuration after launch
Once the campaign is launched, verification is more limited:
Not-applicable: this setting remains visible by clicking Edit when hovering over the campaign row.
Scale levels: they remain viewable at any time in the gear icon ⚙️ > Scales > Assessment, by opening the scale used by the campaign. There you will find the name, value, color, and icon of each level, as well as the obligation to associate actions and measures that applies in expert mode.
Comment and evidence obligation: there is currently no dedicated screen to view these after the campaign has been launched, since these choices are specific to each campaign and are not attached to the scale. However, if your campaign was created in expert mode, you can see the configuration directly in the scale.
⚠️ Remember to note the comment and evidence obligation chosen at the time of campaign creation, for example in its description, if you think you will need to refer to it once the campaign is launched.
Frequently asked questions
Can I still modify the scale once the campaign is launched? No. The scale can no longer be modified after the campaign is launched, regardless of the mode used (standard or expert).
Does standard mode allow actions or measures to be collected? No. Standard mode handles neither actions nor measures, regardless of the scale selected. Use expert mode if your campaign needs to implement security measures or collect actions.
How do I check whether a comment or evidence is mandatory on an already launched campaign? There is currently no dedicated screen for this: these choices are specific to the campaign and are not attached to the scale in the context of a campaign created in standard mode. Remember to note them at the time of campaign creation if you will need to refer to them once it is launched.