NCSR GENERAL USER GUIDE

Transcription

1 NCSR GENERAL USER GUIDE MS- ISAC 31 Tech Valley Drive East Greenbush, NY 12061

2 Table of Contents Introduction... 2 Signing On... 2 Initial Login... 3 Defaulting Home Screen to NCSR General User Dashboard (recommended)... 3 NCSR General User Dashboard... 5 Accessing the Questionnaire:... 6 Taking the NCSR... 6 Submit Self-Assessment... 9 Accessing Your Organization s Information... 9 Accessing your Results...10 Dashboard Options:...10 Viewing the Reports...11 Displaying Dashboard Data...12 Sharing & Communicating the Reports...13 Contact the NCSR Team P a g e

3 Introduction Welcome to the Nationwide Cyber Security Review (NCSR) Portal! This guide will provide you with the information needed to navigate the platform, take the self-assessment, review your results, and export your data. Signing On To access the NCSR portal, please visit the following link: You will then enter your credentials and use the provided Instance Number If you need assistance, please contact 2 P a g e

4 Initial Login All previous users who initially sign on will greeted by the Task-Driven Screen. This page helps tracks your activities on the platform. We suggest defaulting the NCSR General User Dashboard as your main screen. Defaulting Home Screen to NCSR General User Dashboard (recommended) After you log on for the first you will first be greeted by the Task-Driven Screen. We recommend you change this home screen to the General User Dashboard. To change this homepage to display the NCSR General User dashboard, you will click on the Edit button next to the Home button on the upper left-hand side of the screen. 3 P a g e

5 Click on the option for Use a dashboard as your home. Under the choose a dashboard section, choose the NCSR General User dashboard. Then click save. 4 P a g e

6 NCSR General User Dashboard This dashboard is designed to provide you a general overview of the NIST CSF which serves as the NCSR question set, the response scale used to answer the self-assessment, along with helpful links. 5 P a g e

7 Accessing the Questionnaire: Under the NCSR General User dashboard, click on the Take the NCSR hyperlink found under Get Started with the NCSR. This will bring you to a report that has your organization s NCSR record, click on the Questionnaire ID number to access the survey. Taking the NCSR Once in your record, click edit in the top left corner. This will allow you to start the selfassessment. Answer the questions in the general information section where required. If you do not answer these questions, the self-assessment will not let you save and exit until they are answered. Please note that we prepopulated the data were applicable. If any of the information needs to be updated, please contact us at NCSR@cisecurity.org to adjust. 6 P a g e

8 Using the radio buttons and dropdown boxes, complete the questions in the displayed tabs: o Demographics o Identify o Protect o Detect o Respond o Recover o Privacy o Post Survey Questions Utilize the comments section by clicking on the images to the right of the responses. Be sure to click Save after completing each comment. 7 P a g e

9 Continuously save your progress while completing the self-assessment by using the Save button found in the top left hand corner of the survey. Use the completion tracking section to confirm you have answered all of the questions in each tab. 8 P a g e

10 Submit Self-Assessment Navigate to the Submit Self-Assessment section of the self-assessment, use the drop down box and select submit and click save in the upper left-hand corner. Please note: Once you submit the self-assessment, your results are locked and your findings are generated. Accessing Your Organization s Information Under the NCSR General User dashboard, click on the Review your Organization s Information hyperlink found under Get Started with the NCSR. 9 P a g e

11 Click on the link that contains your organization s name. This will bring you to an area that has all of your organization s information. Your organization s chart houses the following: General information o Houses your organizations general information in one place Current profile o Contains your organizations most recent self-assessment scores Peer Profiles o Contains your organizations year-to-year peer profile reports. Your 2017 peer profile reports will be available shortly after the survey officially closes & 2016 NCSR Survey o Contains your previous years self-assessments 2017 NCSR Survey o Contains your current 2017 self-assessment Your organizations year-to-year findings are displayed below each of these sections. Accessing your Results To access the NCSR dashboard, click on the Nationwide Cyber Security Review tab located on the top left side of your screen. Here is where you can access your results through the different dashboards. Dashboard Options: NCSR General User: Provides a general overview of the NIST CSF functions and categories, the response scale used to answer the survey along with key links. NSCR Policy Dash: Access to a repository of authoritative sources that provide a general understanding on what guides and governs your business. 10 P a g e

12 Current NCSR Results: Provides your organizations current NCSR results across the NIST CSF Functions and Categories. Please note, once your 2017 survey s progress status reaches 100% and you submit your survey, your previous year s results will be replaced with your 2017 results. Year-To-Year Results: Provides your year-to-year NCSR results for the NIST CSF Function and Category areas. Year-To-Year Findings: Provides your year-to-year NCSR findings. The findings are based on informative references from NIST CSF, which include COBIT, NIST SP , and the CIS Controls. Findings are generated for any question that was answered below the recommended minimum maturity level of Implementation in Process. Year-To-Year Peer Profiles: Access to your year-to-year NCSR peer profile averages. Please note: Your 2017 peer profile reports will be available shortly after the survey officially closes. Year-To-Year Compliance Reports: Provides access to your year-to-year compliance reports. Currently, we have the HIPAA Security Rule Crosswalk mapped to the NIST CSF. Viewing the Reports Be sure to utilize the drop down box when applicable to see the different reports within the section. To do so, use the drop down arrow in the right hand corner. 11 P a g e

13 Displaying Dashboard Data Within each dashboard, you can edit how the data is displayed by clicking on the dropdown arrow in the right hand corner. Click on Display Report. From here, you can change the way the data is displayed and/or represented by utilizing the tools highlighted below. Please note: Not all reports are able to be displayed in graph format as its dependent on the number of data points being displayed. 12 P a g e

14 Sharing & Communicating the Reports Using the options highlighted below, you can export, print & the reports. Contact the NCSR Team If you have any questions, concerns or issues, please do not hesitate to contact an NCSR team member at or by phone at or We will be sure to get back to you as soon as possible. Thank you for participating in the NCSR! 13 P a g e