Missing reporting (views) / Missende rapportages (views)

[mevdschee]

There should be some reports (views) in the application that can be used to report the compliance of all projects.

---

Er zouden een aantal rapporten (views) in de applicatie moeten zijn die gebruikt kunnen worden om over de compliance van alle projecten te rapporteren.

[mevdschee]

A typical compliance report would report per project owner how many projects:

• there are in total
• have a project number (that is open to write hours on)
• have a specified customer (department + contact details)
• have a personal information status (yes/no)
• have a specified security level (either biv or bbn rating)
• have a data retention specified (in days)
• have a privacy document (sign date or reevaluation date) within the last half year
• have an accessibility document (creation date)
• have an accessibility evaluation (execution date)
• have a support contract (start date)
• have a security evaluation (execution date) within the last half year

This report can be used to steer for compliance by management.