Start with Elements, Solution Capabilities, and Programs

Overview

Paramify is a flexible security and compliance platform where teams can quickly organize their security strategy and automate compliance deliverables. The fundamental building blocks to organize your security strategy and scope your compliance deliverables are Elements, Solution Capabilities, and Programs.

Elements

You should spend some time taking an inventory of your security program. This means identifying the people, processes, and technology that are involved in your security program. This will help you to determine what elements you need to add to Paramify. Paramify can help you do this by taking you through our short intake process, and then providing you with your workspace element library. For information about managing your elements, see Managing Elements (People, Places, and Things).

Solution Capabilities

After constructing your initial Element Library, you are ready to start leveraging the power of Paramify Solution Capabilities. Paramify maintains a set of battle-tested Solution Capabilities that you are welcome to use. You can also create your own Solution Capabilities, or modify existing ones to suit your needs. The Solution Capabilities make use of your component library to define your organization's security capabilities. For information about Solution Capabilities Management, see Managing Solution Capabilities.

Programs

Once you have your Element Library and Solution Capabilities in place, you are ready to create a program. A program is a container for your deliverables. It is where you will define your security objectives, select controls, and generate your documentation. For information about managing your programs, see Managing Programs.

Next Steps

Once you have created the building blocks above, Paramify enables you to:

1. Identify improvement opportunities in your security program
2. Plan how to address those gaps/opportunities and assign responsible roles and reviewers
3. Update your Elements, Solution Capabilities, and/or Programs with the latest implementation details and status
4. Generate a digital SSP package on demand
5. Continuously improve your security program and maintain security compliance as your organization grows