Standards

📋 Table of contents

Manage Standards
Installing your first Standard
Populating your Standard
Creating a custom Standard
Building your custom Standard

Understanding Standards

This feature is designed to simplify the management of compliance documentation within Inverifi, especially when having to manage multiple standards across organisation(s). Users will now have the option to download one of our compliance standard templates and tag their documents with the relevant annex controls / objectives. These documents will then be automatically displayed in our ‘Standards’ page, allowing users to manage and track all their supporting documentation/ evidence.

Knowing where all of your documentation is stored, whilst still being able to find it quickly and easily is a fundamental part of enabling organisations to scale. With built-in compliance standards, Inverifi now enables organisations to not only find the information they need, but to have it structured in a way which simplifies audits and compliance management by extrapolating all key documents, and flagging any gaps in documentation.

1.1) Manage Standards

We currently offer a variety of different global standards ranging from ISO 27001 all the way to Practice Assurance. Users can start managing their standards from the “Manage standards” page. This is accessed though admin panel and a user will need the manager role in an organisation in order to access it.

Our current list of supported standards is as follows:

ISO 27001:2013
ISO 9001:2015
ISO 14001:2015
ICAEW – Practice assurance
The Regulated Services
Anti Money Laundering (AML)
Cyber essentials

This list is always growing and we are open to bring in new standards for anyone using our product, you can also make a suggestion at https://inverifi.com/contact-us/

If the standard you are looking for is not in the list, we also offer the ability to create a custom standard. This just means we do not officially support it and you are responsible for maintaining and updating the standard.

1.2) Installing your first standard

Organisations have access to all of our standards, users can select which ones they want and install them. This will create the template structure and create all of the controls you’ll need to get you started. Our standards work like a checklist, you’ll be able to see which controls do not have any supporting evidence which makes the whole experience feel more beginner friendly and easier to understand.

How to install a standard:

Navigate to the admin panel, you will need to have the manager role in a organisation to be able to see the admin panel
Select which organisation you are managing from the dropdown
Select Manage standards
Click on a standard you’d like to install
Once ticked, finalise the install by clicking “Save standards”
This will trigger a pop up that takes you through the whole install process
Once finished navigate to the standards page, located in the side navbar
You will see your newly installed standard

1.3) Populating your Standard

Once you have installed your standard you’ll need to start populating it with your policies and evidence, Inverifi makes this very simple to do. All of our main content types have an option to be tagged with an annex control / objective, once you tag a document, that document will be automatically carried across to the standards page.

An annex control can have multiple documents listed as evidence, for example you may have a policy, risk or even a workflow that is used as evidence for that one control.

How to tag a document with an annex control:

Open any one of the following content types: Manual, Page, Answer, Risk or Diagram
Click on the info tab
There will be an annex control section
Select the standard you want from the drop down
Then select any of the annex controls that relate to the document
You can search for a annex control or just select one from the list
Once applied, if you navigate back to the standards page you will now see that document listed under the annex control

Standards also have an attachment section, this can be used to upload any external supporting files. This encourages the idea of having everything in one place, you now don’t have to hunt around for your documents – everything is located on your Inverifi standards page

1.4) Creating a custom Standard

If we do not currently support your standard or you’d like to make a modification to one from our collection, Inverifi allows users to make completely custom standards or add/ edit already existing ones.

Here is how you can create a custom standard:

Navigate to the admin panel
Click manage standards
Select “Add your own standard”
Add a title and optionally a description
Once happy, click “Add”
You will now see your custom standard in the list with the others
Click the pencil icon to start building your custom standard

You will now have an empty standard that can be populated with your custom titles and annex controls.

1.5) Building your custom standard

Now that you have your empty custom standard, you will need to build out the structure of your standard as well as all your annex controls.

This works in Inverifi by creating a series of tags, these will act as the structure for your annex controls. You can then nest these tags which will create the structure you want, the structure of the tags will be explained below:

Level 1: The top layer tag will act as the title of your annex E.g A.5 Malware

Level 2: The second layer of tags will be nested under level 1 and will act as the annex control title E.g Virus scanners

Level 3: The third level will be what you actually assign to the content so in my example E.g Virus scanner was 5.1 so that was what I named the level 3 tag

Please note, to nest a tag simply drag and drop it onto the tag you want to nest it under.

You can now simply repeat to achieve the desired standard template you are looking for, if you have any questions or find that our custom standards functionality limit the outcome you’d like to achieve please get in contact with us: https://inverifi.com/contact-us/.