CRM-NG

Compliance

Walk a client through a framework, one clear question at a time.

Built-in frameworks written in plain language, your own question sets, and an assessment screen that scores as you go.

Join the betaBack to Compliance
Answering HIPAA technical safeguards for a clinic, with the running score and open gaps beside the questions.
Answering HIPAA technical safeguards for a clinic, with the running score and open gaps beside the questions.

Why it matters

Framework texts are long, legal and hard to put in front of a client. Spreadsheet checklists lose their notes, evidence ends up scattered across email, nobody knows which answers were actually verified, and every technician scores an assessment a little differently.

Assessments and frameworks in detail

  • Questions in plain language

    Each built-in question is written in our own words with the official reference beside it and guidance on what good looks like.

    • Official IDs, e.g. 164.312(a)(2)(i) or PR.DS-01
    • Guidance under each question
    • Severity if the answer is no

  • Six frameworks ready to use

    Built for the clients IT providers most often serve.

    • HIPAA Security Rule and FTC Safeguards Rule
    • CMMC Level 1 and NIST CSF 2.0
    • Cyber insurance readiness and Essential IT security baseline

  • A framework editor

    Build or adapt question sets for any standard or client policy.

    • Duplicate any framework
    • Add, edit, reorder and remove questions
    • Sections, references, guidance and severities

  • Scoring on the spot

    The running score and open gaps update with every answer.

    • Section progress bars
    • Autosave on every answer
    • Mark complete when done

See it in action

The framework library: each built-in framework with its question count, sections and how many clients use it.
The framework library: each built-in framework with its question count, sections and how many clients use it.

Questions

Are the framework texts copied from the standards?

No. HIPAA, CMMC Level 1, NIST CSF 2.0 and the FTC Safeguards Rule are public US government texts; the questions are written in our own words with the official references. The two IT sets are entirely our own.

What does N/A do to the score?

N/A answers are left out of the score. Yes counts 1 and Partially counts ½ of the questions answered.

Can several people work on one assessment?

Each assessment has an owner on your team, and anyone with manage rights can answer questions and attach evidence.

More about Compliance

See Compliance running on your own data.

Every module runs on CRM-NextGen Cloud: we set it up and run it for you. Beta members get the first invites and hear pricing first.

Join the beta