CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +70 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber, NCSC, ECC, SCF and so much more
When I'm doing partial audits, I'd rather have audit reports that hide (or collapse) requirement nodes that only have
Not applicable
children nodes.For example in an audit exclusively focused on the ISO27001 Annex A controls, that would exclude/collapse the whole Core node from the audit report
Would that be desirable? As default? As an option? At all?