Learn how to define the requirements that are out of scope of an assessment
Table of contents
Filtering controls/provisions
Once you have created your Requirement Based Assessment (RBA), you may want to exclude controls/provisions that are out of scope of the assessment. To find the requirements that you don't need, you can use filters in the assessment builder.
The filters that you can apply depending on the control set or authority you are basing the RBA on.
If you are using a control set, you can search for controls, as well as filter by control set domain.
If you are using an authority document, the filters allow you to filter on any category/section/field of the authority document.
For example, if we are basing this RBA on the Australian Privacy Act 1988, you can filter on Schedule and Part; by clicking on More filters, you can also find and filter using Division and Subdivision.
If you apply a filter, the list of provisions shown will be updated accordingly. There is a total count of the number shown at the bottom. When no filters are applied, it shows the total number.
Excluding controls/provisions
To exclude a control/provision from the assessment, simply select it by checking the box next to the name of the provision/control. Using filters, you can easily find the requirements you want to exclude, then click Bulk Exclude.
You can also exclude a single requirement by clicking on the 3 dots to its right and select Exclude.
The controls/provisions will be removed from this assessment only. The control set/authority remains unchanged.
Re-adding controls/provisions
To re-add provisions/controls, click the + Add Provisions/Controls button at the bottom of the screen.
The Add Provision/Control side panel will appear with the Excluded filter selected. To re-add the provisions or controls, click the Add button next to the name of the Provision/Control.
After clicking the Add button, the Provisions/Controls will be re-added to the assessment. It will disappear under the Excluded filter and appear under All. You can also click on the tick next to a line item in All to exclude it.
The selected number of requirements that will be assessed are displayed on the main side panel screen.
Your next step may be: