Automated Control Assessments

Automated control assessment tests each control against live system state on a set frequency, instead of asking its owner to attest to it once a year. DigitalXForce does this in the AI-Powered Risk Management and Automated GRC module, where C-Assess tests controls against each framework’s requirements and X-Assess tests security controls against the live state of the security stack. It runs on the TRiSCM platform, and the terms used here are defined in the DigitalXForce glossary.

Continuous Control Assurance (CCA) uses evidence, monitoring and validation to determine whether controls continue to operate as expected. Continuous Control Monitoring (CCM) monitors conditions, evidence and signals associated with controls. CCM is a capability within CCA. Each control has its own test frequency, set by how fast its evidence can change.