What_are_Sprinto_workflow_checks
In this acticle:
Introduction
Benefits of Workflow Checks
How do the workflow checks work
1. Configuring Workflow Checks
2. Resolving Workflow Checks
Introduction
Workflow checks in Sprinto are a set of periodic checks to ensure the completion of specific actions or processes within defined intervals.
Unlike the Sprinto system checks, which continuously monitor the system status and trigger based on your system configuration, workflow checks are time-driven and get activated to uphold organizational compliance standards.
Benefits of Workflow Checks
Timely Compliance Notifications: Workflow checks prompt users to complete pending compliance actions within specified timeframes, thus ensuring organizational adherence to compliance standards.
Evidence Collection for Auditing: By facilitating evidence collection for periodic compliance actions, workflow checks streamline auditing processes within Sprinto.
Delegation of Responsibilities: Workflow checks could be assigned to your Sprinto account administrator users, empowering them to manage Infosec responsibilities effectively.
How do the workflow checks work
The working mechanism of Sprinto workflow checks can categorized into the two following stages:
1. Configuring Workflow Checks
Users can configure workflow checks directly from the dedicated Workflow Checks section within the Security Hub module from the Sprinto app.
Some workflow checks are automatically configured based on enabled security compliance frameworks but can be modified as needed.
Alternatively, users can configure checks within the specified compliance sections below under the Security Hub module.
For detailed instructions on workflow check configuration, refer to how to guide on adding workflow check. Sprinto also allows custom workflow checks configuration to cater to compliance needs not addressed with our pre-curated workflow checks. Refer to adding custom workflow check for detailed instructions.
2. Resolving Workflow Checks
Workflow checks appear with statuses such as Due, Critical, or Failing upon activation based on the time of activation to the failing state. You can fix these activated checks using one of the following methods that apply to your use case.
Running a workflow check: Running a workflow check is a primary action to pass the workflow check for the current cycle. In this process, you must upload evidence against the check demonstrating the process or action adherence.
For example, a workflow check for Staff devices health status reporting requires you to upload a report or screen capture of a Mobile Device Management (MDM) tool you use, showcasing the recent device status reporting from your all-in-scope staff members.
Refer to run workflow check for detailed instructions on running a workflow check.
Marking as Special Case: In cases where checks cannot be completed or are deemed irrelevant, users can mark them as special cases. This action passes the check for the current cycle and submits it as evidence under the special case category.
For detailed instructions, consult the Sprinto documentation on running workflow checks.