Control Compliance Suite

 View Only
  • 1.  CCS - RAM

    Posted Aug 09, 2010 02:20 PM

    Another request for anyone that has used / uses the RAM module of CCS


    How customized can you make the content / surveys in RAM. In my environment, we have in the past tried to bend CCS to do some things that it was not created for out of the box but yet still works well.

    For example, I'm looking at using RAM as a way to store evidence on a survey in the following manner


    Many of our applications have application templates that are created in Excel . This template pretty much states the roles in the system a person can have based on their job code, process level and location (defined by our HR department).

    Each time a change is made to this template the changes are sent off to an approver , many times a pdf , email or such done by email and not a central location.


    I was thinking of working on a case from RAM in our environment where we could use RAM to have someone connect to CCS and approve that change, save it as evidence  etc etc. Mostly what I've seen RAM used for is a survey tied back to something like Acceptable Use Policy topics and such.


    Anyone else using RAM , likes ..dislikes?



  • 2.  RE: CCS - RAM

    Posted Aug 16, 2010 06:00 AM

    Hi Kevin,

    I've used RAM but mainly to map the procedural controls coming out of the survey to the policies in the policy manager. If I've got what you are looking for, I guess Entitlements Module within CCS would be more apt. Since the templates you are working with are in Excel, the control point can be "Windows File". Approval process for any access/changes required to the document goes through CCS and summary reports will let you know what has changed/altered at row level.

    Cheers!


  • 3.  RE: CCS - RAM

    Posted Aug 16, 2010 05:22 PM
    I am in the hopes of being able to use RAM for survey's for policies as we expand the use in addition to making some of our existing approval processes easier

    the only item that kills me is that I cannot (that I know of in version 10) mark a novell file as a control point. We utilize Novell for file shares otherwise I like that idea of control point you mentioned. One question about that though, does the report tell you the data that changed IN the file.....if so I might have to put a file out on a windows share to test that feature a bit more.