CAF Dashboards¶

Audit Entries Panel¶

Each practice dashboard includes a panel to enter Audit Review information on each practice in the solution.

This workflow can be used by you and your internal teams to track practices, including:

• Comments and feedback from reviews
• Practice compliance status
• Follow-up review dates

Audit entries can also be viewed in Executive Overview and Systems Overview dashboards.

How to add an Audit Entry¶

1. Click 'Create audit entry'
2. Add details:
3. Practice reviewer/author: The practice reviewer will automatically be set to the current splunk name.
4. Status: Select the status for the audit review.
5. Audit Date: date of the audit event that is being reviewed, sets to the current date by default
6. Recurring/Follow-up review (optional): toggle and set the date for a follow-up review
7. Title: Title of audit entry
8. Description: Description of audit entry
9. Click submit

CAF Requirement Entries Panel¶

Each practice dashboard includes a panel to enter CAF Requirements reviews on each practice in the solution.

CAF Requirement entries can be used to review data based on Indicators of Good Practice (IGP) of that requirement.

CAF Requirements entries can also be viewed in CAF IGP Overview and Systems Overview dashboards.

How to add a CAF Requirement Entry¶

1. Click 'Create a new requirement entry'
2. Add details:
3. Practice reviewer/author: The practice reviewer will automatically be set to the current splunk name.
4. Requirement: Select the IGP for the review.
5. Status: Select the status for selected IGP.
6. Assessment Date: date of the audit event that is being reviewed, sets to the current date by default
7. Recurring/Follow-up review (optional): toggle and set the date for a follow-up review
8. Title: Title of audit entry
9. Description: Description of audit entry
10. Click submit

Artifact Entries Panel¶

For some practices, documentation or policy will describe some or all of the practice requirements

Each practice dashboard includes the capability to enter relevant documentation and artifacts directly within Splunk, allowing the Compliance Essentials to be a one-stop shop for all mediums of controls.

CRUD Panel Permissions¶

Audit and Artifact Entry Panels have the following permissions:

• Users without audit_admin role can only edit own issues
• Users with audit_admin role can update and delete others

Add Panels¶

The solution includes 300+ panels that can be added to dashboards through the Custom Content Page, or through the “Add Panels” button on each practice dashboard. For setup instructions visit the Add Content to Dashboard page.