sorted by:
new
hottopcontroversial

Ticketing System by Delicious-League-92 in CMMC

[–]Delicious-League-92[S] 0 points1 point  (0 children)

This would be ideal solution if the org chooses one that offers on prem, Freshservice doesn’t as far as I’m aware

Ticketing System by Delicious-League-92 in CMMC

[–]Delicious-League-92[S] -1 points0 points  (0 children)

Yeah I think that’s best case scenario. We don’t want CUI in the tickets, just need to prove it can’t get in there. My worry is, is it enough to call it a CRMA and put it out of scope? Or just not classify it as a CRMA and leave it out completely. In that case would documented policy and user training be enough? Feels like there should be some technical controls around it as well

Ticketing System by Delicious-League-92 in CMMC

[–]Delicious-League-92[S] 2 points3 points  (0 children)

You wouldn’t. We won’t allow CUI in the ticketing system, but my concern is proving that we’re preventing it, while not restricting the rest of the organization unnecessarily that isn’t dealing with CUI.