Product Discussions

Need the ability to upload diagrams for several areas of the SSP to define system boundaries, define data flow for protected data, system boundaries, etc.

Thank you for the ability for DATTO EDR logging into the reporting.  Now I am noticing Scalepad does not recogonize VSAX not being picked up on the reporting.  I know our clients have the RMM installed, but Scalepad show it does not.  This still prevents me from sending reports to clients.  Do we have a timeframe for VSAX recognized as RMM installed on devices?

Is there a way that I am missing to link an existing uploaded Policy as evidence? 

Hello, when trying to login to my MSP portal on ControlMap, none of my links are loading. Is there any known issues with the application now? There was the database maintenance last night and I can’t seem to login.Just shows up gray screen and when I try to go through the Lifecycle manager way, it just says redirecting to your region then freezes up. I’ve tried logging through incognito, deleting my cache, as well as logging in from another device on another network and it is not working.  Please help!

DIBCAC released a Self-Assessment Database that they themselves use when conducting assessments. It has very explicit expectations of minimally 320 evidence checks--some of which can be met by a single document/artifact. DIBCAC has evidence expectations for each of the 320 assessment objectives. How has ControlMap’s default expectations for evidence for CMMC landed on 53 pieces (and the same count for 171r2 framework)?  

When we first signed up for this service a couple of months ago I had the ability to create a new initiative based on an insight (workstations over X years old) and spread the workstations across X amount of quarters. I was then able to move computers between those quarters. I no longer see this functionality. Is it removed or has it been moved somewhere else? This is a basic function that sold us on the platform in the first place. The program is not much use if we cannot easily and intuitively plan out our equipment lifecycle. Thanks

first problem, your pci dss 4.0 is based on the ‘prioritized approach;’361 questions.https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Supporting%20Document/Prioritized-Approach-For-PCI-DSS-v4-0.pdf Basically useless. and I do 3 or 4 PCI readiness audits a year (and I can’t use controlmap, Example: if a client needs to be pci compliant, and can use the SAQ A, there are only 22 controls.So if I ask the client to go through the 360 questions and mark 338 of them as ‘out of scope’ they will compare me to.. ok, bozo the clown.how to fix? don’t know.  you would need to tag each control with the SAQ that requires is, and let us mark ‘all out of scope except’  these tags.here is the list: The number of questions in each PCI Self-Assessment Questionnaire (SAQ) varies based on the SAQ type. Here's a breakdown of the number of questions per SAQ type: SAQ A: ~22 questions This SAQ is for merchants who have fully outsourced all cardholder data functions to third-party service providers. SAQ A-

Is there some type of report we can use for our own compliance needs that shows all the users and the associated privileges?  I am looking for this for our own compliance requirements internally.

I don’t do this very often. I’ve noticed that not all my client companies are syncing over from ITG. I’ve checked the sync status and everything seems correct. Is there someplace that filters on specific companies to sync? None of my new clients show up in Scalepad. 

We are not able to login to the Backup Radar website and cannot open a support case. Your status page has no reported issues and same with DUO. Can someone please respond? Thank you, Tracy

Just wanted to take a moment and thank Mark for bringing Shay on to the Workshop today to talk about LCM.  It was educational and I now have a better understanding of what each product does and the strengths and weaknesses of each.It was great seeing 32 people on at one point during the meeting.Keep up the great work Mark, knowledge and interaction with ScalePad and other partners is a win-win for all!

With the “Implementation” tab in each objective, I can put notes as the how the objective is implemented. This doesn’t seem to show up in any report. Is there a point to this field? I’d love to have my reports give this bit of free-text information against each objective without a copy-and-paste.

Can Lifecycle Manager show the vendor’s end of life date in addition to the warranty date?     My industry has moved to focusing on EOS/EOL as the key to whether they replace  vs just warranty or age.     Having this readily available in the reporting would be amazing.    

We are seeing duplicate entries of evidence with different objectives for some of our customers.   We have no idea if this is expected behavior.   We only have one framework associated with the customer.  Please advise.  

Hello everyone! As the Client Business Reviews are approaching for my MSP, I wanted to ask if anyone could share their experience and tips with using Lifecycle Insights in these meetings. We have only had Lifecycle Insights since the Fall of 2023 and have gone through one round of Client Business Reviews in that time. LCI is designed to be used during customer-facing meetings, and I would be grateful if any MSPs could share their tips or best practices for using LCI in this context.A few questions I would love feedback on:What topics do you usually cover in Client Business Reviews? Which subjects do you cover in every meeting and which ones do you avoid? How do you incorporate LCI during the meeting? Do you have any best practices that you use during the meeting?

Hi guys,I wonder if you could assist. I did see a discussion started on this several months ago but there doesn’t appear to be any responses.We recently moved from Datto’s RMM to ConnectWise RMM, although are still using AutoTask as our PSA for tickets, opportunities, contracts etc. I notice that Lifecycle Manager has a ConnectWise integration (which we have enabled) but the data I am seeing within Lifecycle Insights appears to be old and cached from Datto (back when this was live, we no longer have access to this platform).Are there plans to integrate Lifecycle Insights with ConnectWise RMM or is there some way for me to point LCI at LCM for asset data? We are struggling currently because we’re unable to present customers with an accurate representation of their device estate in our monthly/quarterly meetings.As always any help would be greatly appreciated.

We are getting inconsistent syncs when it comes to the Location field for Assets.  It seems if there is a custom site set for the asset in CW, then that site comes over as the location in LCI.  If the site in CW is set as Main (the default), sometimes it comes over to LCI as Main, and other times it comes over as Unknown Location.

Preparation for incident response can often be over looked until its too late. There is a reason incident response is a best practice and a requirement for most cybersecurity compliance frameworks as well as an often questioned on vendor due diligence forms.The recent incidents with CDK Global and United Health’s Change Healthcare multi-week outages from ransomware both resulting in 10’s and 100’s of Millions in losses + ransom payments or the recent Microsoft outages in July including O365 and Azure with a botnet DDOS attack and the entire industry from a bad update combined CrowdStrike and Microsoft Update Service are really good examples of why incident response and readiness prep are not just a good idea, but should be an essential practice for every organization.ControlMap includes an Incident Response Policy template along with Responsibility Matrix to assign responsible parties for objectives and Risks to Manage and consider alongside your chosen framework objectives that align

This was such a fun interview to do with Dan Fox! We got into everything from the genesis of ControlMap to the challenges MSPs have with deploying and scaling a Compliance-as-a-Service practice.Some questions for the community:What are some of the challenges you’re seeing in getting your clients on the compliance train? What roadblocks are you seeing internally in your MSP to get more diligent with your own compliance journey?We’d love to do more sessions/workshops on compliance topics, please let us know if you’d like to see any specific topics explored!Check out the interview: 

Good Day,When is Rackup Radar realeasing the new feature to identify OS type ?Please advise