Overview of Sub-Mitigation Plans

Sub-Mitigation Plans allow mitigation efforts to be divided into smaller, more manageable segments. These segments can be assigned to different individuals within the same department, enabling enhanced teamwork and faster completion of the overall effort.

Key Features of Sub-Mitigation Plans:

• Primary Plan Ownership: The primary plan owner remains responsible for the entire mitigation plan, retains visibility over all sub-plans, and can contribute to the completion of sub-plans.
• Exclusivity to Data Sensitivity Scans: Sub-mitigation plans can only be created for Data Sensitivity scans as these are file and email-focused. Other scans, like Vulnerability and Secure Baseline scans, are target-based and do not require sub-mitigation plans due to their inherent segmentation capability.

Steps to Create a Sub-Mitigation Plan

1. Access the Mitigation Plan

1. Go to the Data Sensitivity Plan List in the CYRISMA Command Center.
2. Select a Mitigation Name from the list.
   • Note: Sub-mitigation plans can only be created for plans assigned to the logged-in user. If the plan is owned by someone else, it must first be reassigned to you.

2. Fill Out the Sub-Plan Form

1. Enter a Sub-Plan Name: Choose a meaningful name to identify the sub-plan.
2. Assign the Plan: Select an assignee from the dropdown menu.
   • Important: Only individuals from the same department as the original plan owner will appear in the dropdown.
3. Set the Dates:
   • Begin Date: Choose a start date.
   • Due Date: Select a due date within the original mitigation plan’s date range.
   • Note: Sub-mitigation plans cannot be created for overdue plans or with dates outside the original plan’s timeline.

3. Assign Files or Folders

1. Use the folder browser to select specific files or folders to assign to the sub-plan.
   • The original plan owner retains visibility over all files and folders in the primary plan, while the sub-plan assignee will only see their assigned files and folders.

4. Submit the Sub-Plan

1. Click Submit once all fields are filled in and files/folders have been selected.
2. The assigned individual will automatically receive an email notification, prompting them to log in to the CYRISMA Command Center to begin work.