Manage tasks and deadlines in the ISMS cockpit

The ISMS cockpit shows more than your degree of fulfilment: it also gathers everything still to be done — open tasks from your requirements and the implementation deadlines of the loaded lists of requirements. This article shows how to manage both through the “Tasks” and “Deadlines” tabs.

Prerequisites

• Your team has a licence for Information Security (ISMS).
• At least one list of requirements has been loaded.
• You have permission to view the ISMS Cockpit.

Open the cockpit and check the key figures

1. Use the product switcher at the top of the left navigation bar to switch to the “ISMS” area.
2. Open “Cockpit”. The heading shows the active framework and the current degree of fulfilment, for example ISMS Cockpit · ISO/IEC 27001.
3. Read the key figure tiles “Outstanding tasks” — including an indication of overdue ones — and “Next deadline”. Together they give you a quick status check before you go into the tabs.

Manage tasks

1. Open the “Tasks” tab. It lists all tasks linked to requirements — such as pending follow-ups or manually created follow-up measures.
2. Work through the entries and compare them with the “Outstanding tasks” tile: overdue tasks come first.
3. To record a follow-up measure for a specific requirement, click the requirement in the “Requirements” tab and switch to the “Tasks” tab of its detail view.
4. When you complete a review, use the “Follow-up” field to specify when the requirement is due for review again. When due, the follow-up automatically creates a task for the assigned user, which then reappears in the cockpit.

Track deadlines

1. Open the “Deadlines” tab. It lists the implementation deadlines of the requirements (“Implement deadline by”), so you can identify at an early stage which requirements will be due next.
2. To set or change a deadline, open the requirement concerned and click “Edit” in the “General” section.
3. Enter the target date in the “Deadline (to be implemented by)” field and select the person in charge under “Responsible person”.
4. Click “Save and go back”. The new deadline then appears in the “Deadlines” tab and feeds into the “Next deadline” tile.
5. If you accept a residual risk as an exception, the “Valid until” field acts like a deadline: a review is created automatically on the expiration date. If you leave the field empty, the exception is unlimited.

Practical tip: classify clearly non-relevant requirements as “Not applicable” early on. This streamlines not only the assessment list but also your tasks and deadlines down to the requirements where real implementation work is waiting.