Here you find quick answers to the questions that come up most often when working with Ariadne ISMS. Each answer links to the article where you can read up on the topic step by step.
| Topic | Typical questions |
|---|---|
| Ariadne and ISMS | Synchronization, page owners, SoA |
| Required protection and assets | Overriding, workarounds, many end devices |
| Risks and measures | Measures for several risks, reassessment, management review |
| Permissions and administration | Confidential, scales, deleting, export, notifications |
Ariadne and ISMS
Are changes in Ariadne automatically taken over into the ISMS?
No. When you take over a business process from Ariadne, the title and description are prefilled once. After that, nothing is synchronized. However, you always see the current properties of the linked pages, such as title, page type, page owner, workflow status and validity, under Ariadne references.
Read more: ISMS: Create business processes and link information
Does the page owner in Ariadne automatically become the owner in the ISMS?
No. The page owner is only displayed. You set the Owner of the business process in the ISMS yourself.
Read more: ISMS: Create business processes and link information
Can an Ariadne page belong to several processes?
Yes. A process can reference several Ariadne pages, and a page can belong to several processes. If a page is already linked, the ISMS points this out but does not block anything.
Read more: ISMS: Create business processes and link information
Where is the Statement of Applicability (SoA)?
In Ariadne, not in the ISMS module. That is where you maintain the SoA via the standard mapping, as well as policies and the process for reporting security incidents.
Read more: ISMS: What is Ariadne ISMS and how do you work with it?
Can I change the interface language?
Yes, in the user menu under Sprache / Language. Scales, BIA scenarios and categories appear as your organization has configured them, for example in German.
Required protection and assets
Can I override the derived required protection of an asset?
No. The ISMS calculates it from the information, the business processes and the dependencies. If a value looks wrong to you, check the classification of the information, the BIA of the process or the dependency mode.
Read more: ISMS: How required protection is derived from process to asset
Why can't I assess availability on an information item?
Because availability in the ISMS comes only from the business impact analysis on the business process. On information you classify confidentiality, integrity and data protection.
Read more: ISMS: Perform a business impact analysis and understand the MTPD
What does "Workaround possible" mean for a dependency?
If the asset fails, there is a temporary way around it. The availability requirement is therefore shifted back by one BIA period.
Read more: ISMS: Create assets, maintain dependencies and derive required protection
We have 1,000 end devices. Do I have to create each one?
No. Work with classes such as "Sales notebooks" instead of individual devices. This keeps your ISMS manageable, and the assessment applies to all devices in the class.
Read more: ISMS: Create assets, maintain dependencies and derive required protection
Risks and measures
Can a measure be assigned to several risks?
No, a measure belongs to exactly one risk. If you need the same measure for several risks, create it several times. When you copy a risk via … > Copy risk, you can copy its measures along with it.
Read more: ISMS: Plan, implement and document measures
Why do I have to reassess after completing the treatment?
Only the reassessment shows your residual risk. An implemented or verified measure only tells you what was done, not how well the risk is now under control. That is why the ISMS flags a risk for reassessment immediately after completion.
Read more: ISMS: Reassessment and follow-up at a glance
Is there a report for the management review?
The Risk management dashboard is designed for this: risk landscape, risk matrix, trends and hotspots on one page. There is no separate report mode.
Read more: ISMS: Dashboards: keep track of pending actions and the risk landscape
Where can I find a complete example?
In the example article we walk through the "Create quote" process from creation to residual risk.
Read more: ISMS: End-to-end example: the "Create quote" process
Permissions and administration
What does "Confidential" mean on a record?
A confidential record is only visible to key users, admins and the record's owner and stakeholders. It does not appear anywhere for anyone else. It is access protection, not a protection level.
Read more: ISMS: Protect confidential records
Who can change the assessment scales?
Only Ariadne support can change the impact and likelihood scales. Your admin maintains score ranges, the auto-accept threshold, the BIA configuration and reassessment intervals under Settings.
Read more: ISMS: Settings, default values and data import
Can I delete records?
No. Archive records you no longer need with Archive. Archived records are read-only and key users and admins can restore them. Risks that do not apply are additionally discarded with Discard risk.
Read more: ISMS: Roles and permissions
Can I export lists or dashboards?
No, there is currently no CSV or PDF export. For analysis, use the list filters and the dashboards. Every filter is stored in the URL, so you can share filtered views as a link.
Read more: ISMS: Dashboards: keep track of pending actions and the risk landscape
Will I get e-mail reminders about due tasks?
The interface has no e-mail notifications. You see what is open for you on the dashboard under Action required and Upcoming deadlines, fastest with the Assigned to me tab. The numbers in the navigation also show pending actions.
Read more: ISMS: Dashboards: keep track of pending actions and the risk landscape
Can I attach evidence to records?
Yes. Under Documents you upload files to business processes, information, assets and measures. When you take over a measure from the catalog, its documents are copied too.
Read more: ISMS: Plan, implement and document measures
Related articles
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article