This section provides orientation on managing knowledge bases, available through the Knowledge module.
A knowledge base is a checklist composed of controls applicable to a specific type of asset component – for example, an internet browser, a certain operating system (Unix, Windows, etc.), or a payment management process.
A number of knowledge bases are provided by Modulo with the system installation. However, knowledge bases specific to your organization can be created for use in projects.
Each knowledge base is composed of various controls. A control describes a good security or risk management practice. According to their characteristics, controls can be applied to a certain type of component – such as software, equipment, a physical environment, a person, or process – in order to reduce the risk to the related assets.
The knowledge base editor allows custom knowledge bases and controls to be managed. It is also possible to view and create copies of knowledge bases and controls registered in the system using the knowledge base editor, including those created by Modulo.
Note: All knowledge bases have an ID comprised of three to six alphanumeric characters (generated by the support team during system installation), a period, and an additional six numeric characters, generated sequentially as knowledge bases are created. Knowledge base controls also have an ID comprised of six alphanumeric characters, a period, and an additional eight numeric characters, generated sequentially as controls are created.
The first six characters are used to identify the origin of the knowledge base or control, and can be viewed in the Information section of the Administration module. IDs for knowledge bases and controls provided by Modulo always begin with MOD_EN. IDs for knowledge bases from ABC Company, Inc., for example, could begin with ABC01. The last set of characters is used to uniquely identify the knowledge base or requirement.