Product Discussions

Is anyone playing with Scalepad MCP and finding some cool use cases with Lifecycle Manager? I’ve been trying different workflows but haven’t found a gamechanger process yet. I like that it can create initiatives, but I want assets linked to the new initiatives, so I still need to touch each one manually.

This is a very minor issue.   I just want to bring to this up to the community.   In Control Map, Governance is always listed last.   Ideally, it should be listed first where the Information Security program is started before building the policies and procedures.   The order presented is contrary how we explain governance to our customers and their leadership.Policies Procedures Governance:I think this order makes more sense when looking at hierarchyGovernance: Policies Procedures

Contracts When we import the contract details it is double counting the contract value as the contract header has the total value and the sub contract items are added once again. If you look at the import screen, you can see the hierachy view. Ideally this is how it would be presented in the budget report.

Would it be possible to add a button in the “edit info” page of an asset to take you back to the client asset page you were just in?

https://ag.ny.gov/resources/organizations/data-breach-reporting/shield-act

Good morning,I have identified a bug when cloning a ControlMap tenant to create a new company.Expected behavior: All risks should appear under Risks → Risk Register → List.Actual behavior: The List view is completely empty after cloning (see screenshots). However, the risks do appear correctly in the Dashboard view. If I manually add a risk via "Add Risk", the Dashboard updates accordingly — but the List view still remains empty.Important: The master tenants (source tenants) display all risks correctly in the List view. The issue only occurs in the newly cloned tenants.I have reproduced this issue multiple times by creating new tenants. The same error occurs consistently.Please fix this urgently. We onboarded a new company on Friday and three more are joining today — they all need a working Risk Register.Screenshots attached.Golden Tenant (Master) Bug (BMI): 

In the old dashboard (without the backup plans) company names were visible in the tiles. However, since the new dashboard the company names are only visible when hovering over th entries. Showing the company names will provid a much quicker overview. That's what BakupRadar is all about isn't it?Please put back the option to show company names permanently.

With the “Implementation” tab in each objective, I can put notes as the how the objective is implemented. This doesn’t seem to show up in any report. Is there a point to this field? I’d love to have my reports give this bit of free-text information against each objective without a copy-and-paste.

We need the assessment reports to keep the formatting when exporting to pdf. Support confirmed that the library they use for creating pdfs does not natively support rich text so it extracts the public comments to plain text. This makes the reports look less professional and hard to read.This first image is a public comment in an assessment with bullet points and bold, the way I want it to appearThis next photo is how the exported pdf report strips the formatting and does not look good 

SolarWinds N-central Agent under software is the incorrect description.  The company is now called “N-Able Technologies” you have a specific API with them, yet you still refer to their Software as SolarWinds under RMM.   This should “literally” take you 5 minutes to change the description in your database.It’s been 5 YEARS now.SolarWinds Corporation completed the spin-off of its managed service provider (MSP) business into a standalone, publicly traded company named N-able, Inc. on July 19, 2021. 

Avanan is by far the best Spam filter agent in my opinion. I’d like my QBR’s to reflect what Avanan does for my clients. Will this or other Spam filter monitoring be added to lifecycle manager for our QBR’s? or if this isn’t on roadmap for integrations is there another way to get this info into our QBR’s that’s not manually adding pages that don’t match the flow of the QBR? thoughts?

Is there a way for, or a plan to eventually have Quoter pull in pricing details from distributor website?  These details contain promo/disti/vendor rebates, quantity pricing and expiry dates of said rebates.  Thes rebates can add up to a few hundred dollars in savings on one device.   Currently, Quoter can only pull in the final price with all the rebates applied.  It doesn’t even show if that’s a discounted price, which can be dangerous for obvious reasons.   Thanks!

We’ve had some members depart so are doing account cleanup.  Wondering what is the recommended process.Have validated with our test environment. In Quoter, if a user has people assigned, are prompted to reassign the people to someone else and then the user is deleted.  Any quotes they owned are still there but there is no longer an identified owner for the quote and can’t see who performed the activity, impacting the audit trail.Tried the alternative of updating user credentials in Scalepad Hub, adding a prefix to the name and email.  The email doesn’t update because it’s waiting for a validation from the new email.  Do see the updated name in Quoter and the audit trail appears retained.  Of course this impacts other apps associated with the Scalepad Hub user.

Am I missing a way to sort the tenant dashboard in the UI? E.g. by company name? If not, guess this is a feature request.

We have modified how we want to organize a few of our controls and it will be easier to restart.  I deleted the framework and recreated it but it kept our answers!   Is there a way to reset a framework to default?

Is there a way to change the language of the Title for the Objectives on the SOC2 framework specifically?   For example, looking at the default language for SOC2 framework for Objective CC 1.1.1 it says ‘Sets the Tone at the Top’.  We would like to modify this title to align with our client’s controls.  We found how to modify the description, but can you modify this title?I think technically this CC1.1.1 is an objective but is usually considered the actual control and evidence is tied directly to this identifier.  In ControlMap it isn’t, instead it would be tied to control HRM-1 for example. We are just trying to make it easier to onboard new clients that are unfamiliar with with CC1.1.1 as an objective and more of the control.

What are the differences between Controls and Objectives? 

Is there a way that I am missing to link an existing uploaded Policy as evidence? 

Hello,With the new Backup Plans, for overnight jobs that start and finish on different days, using RPO as the SLA compliance criteria is mandatory.However, we have a critical issue: there are no options that allow us to mark devices as "out of compliance" when multiple results with different statuses are received within the configured RPO window.Example: We monitor a VM that performs 2 backups overnight.1 fails and 1 succeeds.Both fall within the RPO window, so the plan marks this device as "SLA compliant".However, we need it to be flagged differently (at risk, out of compliance, or another distinct status) because our customers contracts require every issue to be investigated.In its current state, the new backup plans prevent us from delivering an adequate service level.The solution would be to add more configuration options for RPO-based SLA criteria, such as "% successful results in RPO time", similar to what's already available when RPO is not selected. Best regards,Federico Bocchi

I would like to be able to delete in mass all contract information for a client that is sync’d from the PSA.In the event that you sync all contracts and their child records, the dollars get doubled. I did not realize this, and now have to individually delete each contract record for each client that is a “duplicate”.Painful.

We often perform multiple assessments for a number of different reasons.  We should be able to present the results of mutliple assessments in LMX  (just like we could in LCI)In Deliverables 2.0 provide the ability to include multiple Assessments for presentation.

We have some included software that we set to “No Charge” to ensure our costs are captured against a managed service agreement. How do I get these zeroed out on the budget in LMX?

Hello,It would be nice if you could see the contracts that are selected to show on the main page of contracts.  For example, when I click into Sync from PSA, it would be nice to see which contracts I already have synced.  Sometimes there are a lot of contracts, and I don’t want to double up which ones I have selected. Thank you!

How do I delete an action Item? I have a whole bunch I want to delete.

I noticed a new option in our tenants within the dashboard view in ControlMap: Progress Stage. The Assessment, Planning, Implementation and Monitoring stages are self explanitory, but can you tell me what the intent is with “clear stage”? I want to be able to articulate the mean to our users. Thank you!