Getting Started
Step 1 - Signup with your Microsoft or Google credentials
If you are the first time user, signup using Microsoft or Google credentials. We do not support signing up with generic email accounts such as gmail.com and yahoo.com. Please use your company’s email credentials to signup. If you can’t sign up using Microsoft or Google, please contact Step 2 - Create your ComplianceCow domain
ComplianceCow is a multitenant security grc platform. All transactions are isolated by customer domains. We will try to infer your domain from your email id. However, you can edit to create your own domain.
Check your inbox for confirmation email. Don’t forget to check your spam folder. Your user account and domain will be activated once you verify the email. If you are the first user, you are made the administrator, by default.If your domain already exists, ComplianceCow will automatically notify current administrators of your request. One of the administrators will need to approve your signup request to activate your account.If you have any questions, please contact Step 3 - Create your Security Assessment Frameworks
Create your assessment category. The Assessment Category is the grouping of assessment frameworks for easy management. Specify your assessment category and then upload your assessment framework.
An Assessment Framework is a collection of controls or risk indicators. We provide you with a sample list of assessment frameworks that you can use out of the box. Make sure to scroll down to see these samples. When you click on any of the samples, such as PCI-DSS, you will download the .csv file. The file has the following structure:- Control Id – The ID is a hierarchical notation. The numbering schema establishes the parent-child relationship for the controls. Each alphanumeric value before or after the ‘.’ specifies the parent or child relationship with the other. For example, control id 1.1 is the child of control id 1 and is the parent of control id 1.1.1
please note that there is a difference between 1.0 and 1 in the notation - Control Name
- Control Description
You can modify the .csv file; add, update or delete any of the records to create your own security assessment framework.
Step 4 - Just play around
Now that you have signed up and created your own assessment, feel free to play around. Explore how you can- Configure your assessment for checklists, notes, attachments
- Upload your own evidences
Currently we only take csv files for evidences but that will change soon! - Assign controls, evidences to other team members
Security GRC Automation
That Works
and remediate issues across complex infrastructure
before audits, not after.