吉祥坊

An Introduction to HiSoftware Compliance Sheriff

Version 4.2

HiSoftware Compliance Sheriff is an application suite of auditing and compliance tools. 听It allows your organization to implement governance policies around unstructured content in a shared environment, based on the current standards outlined by HIPAA, FISMA, COPPA, Section 508, Section 208, WCAG 1.0, WCAG 2.0, and other commonly observed U.S. and international standards. In addition to these published standards, you can create custom sets of rules to suit your organization鈥檚 unique policies and requirements. Compliance Sheriff scans your content against these rule sets, and displays the results in easily understood reports that reveal why content has passed or failed.

听

Note:听This document is compiled from HiSoftware Compliance Sheriff User鈥檚 Guide and Universal Design Center, California State University, Northridge documentation

Scans

A scan is a collection of checkpoints that will be executed on the pages of a website. Once a scan has been run, you can use the scan results to create听views听and听reports.听Scans allow you to run multi-level checks on your site for compliance issues. They can be scheduled by site users with valid permissions.听Multi-level checks scan certain levels down into the website, beginning from the start page.

Example of a 2-level scan:

听

Home page听鈫捥齣s located at the听level 0

Pages associated to every link within the Home page听鈫捥齛re located at the听level 1

Pages associated to every link within the pages at level 1听鈫捥齛re located at the听level 2

听

When you click on the听Scans听tab, a list of all the scans you've created will appear on the screen. 听The page defaults to the听Scans听sub-tab, but you can click the听Groups听sub-tab to see a list of all your听scan听groups. 听You can also select a scan group from the听Scan Group听pull-down menu in the upper right.听You can create a new scan by clicking听New, or delete a scan by checking the appropriate box and clicking听Delete. 听If you click听Toggle Filter, text boxes will appear at the top of each column, and you can enter specific values into these boxes to filter your list. 听Check听Disable auto-update听if you don't want the page to refresh while you're selecting a range of scans.

听

Create a New Scan

To create a new scan, you must enter a Base URL and select at least one checkpoint group.

1.听 听Click on the听Scans听tab, then click on the听Scans听sub-tab.

2.听 听Click on the听New听button.

3.听 听In the听Display Name听field, type a name for the scan. You can use long descriptive names.

4.听 听In the听Base URL听field, type the full path name of the site to be scanned.

5.听 听By default, subgroups are not listed in the table. Put a check in the 鈥淪how subgroups鈥� box听to show all available subgroups in the list.

6.听 听In the听Checkpoint groups听table on the right, select the听Checkpoint groups听or/and听Subgroups听to be used by the scan, then click on the听Add听button. 听You must select at least one checkpoint group. 听(A subgroup is any checkpoint group that is contained by another checkpoint group.)

7.听 听If you would like the scan to begin from a specific site page, enter the address of this page in the听Start page听field.

8. 听听听Click on the Save button.

听

Note: The option provided for testing听additional file formats听which is to check PDF and WORD documents, is not functioning at this time.

Edit a Scan

1.听 听Click on the听Scans听tab, then click on the听Scans听sub-tab.

2.听 听Locate the scan you wish to edit, and click on its name.

3.听 听Modify the scan properties as needed. 听To remove a checkpoint group, look for the听checkpoint group's name in the left-side听Checkpoint groups听field, click in the box next to it, then click on the听Remove听button.

4.听 听Click on the听Save听button.

听

If you use the听Save as new听button to create a new Scan, you must change the听Display name听first

Delete a Scan

1.听 听Click on the听Scans听tab, then click on the听Scans听sub-tab.

2.听 听If the scan you wish to delete is running, stop it first, using the听Stop听button on the far right.

3.听 听Select the check box next to the scan's name.

听 You can select more than one scan to delete at a time.

听 To select or de-select all scans, you can double-click on the header cell of the check box column, located at the top left.

4. 听Click on the听Delete听button.

5. 听A confirmation dialog box will appear. 听Select听OK听to confirm deletion.

听

Any results that may have existed for the scan will be permanently deleted.

If you elect to delete a scan that has a view associated to it, a confirmation box will appear: "One or听more views refer to the scan(s) you are deleting, and may not continue to function correctly." Choose听OK听to delete, or听Cancel听to abort.

Run a Scan

1.听 听Click on the听Scans听tab, then click on the听Scans听sub-tab.

2.听 听Find the scan you wish to execute and click on the听Run听button, located at the far right of the row.听Run听launches the scan immediately. 听If the scan is marked as "local" in the听Base URL听column, it will run on your own machine. This option requires theHiSoftware Toolbar.

3.听 听The status will change to "Running."

Scans can also be started automatically by setting up a 听Schedule.

Stop a Scan

1.听 听Click on the听Scans听tab, then click on the听Scans听sub-tab.

2.听听 Check that the scan status听 shows as听Running.

3.听听 Click on the associated听Stop听button听 to stop听 the scan.听 The听Stop听button听 is located in the same place as the听Run听button, at the far right of the row.

View Scan Results

1. After a scan has been run, click on the听Scans听tab, then click on the听Scans听sub-tab.

2. Click听More听in the row corresponding to your scan.听 听The听More听link is located in the far-right column.

3. Additional fields will appear beneath the row. To view a scan result, click听Show Results.

4. The properties for a view will be displayed. If you have previously specified a view, the view properties will be remembered. 听(For more information on view properties and how to manage them, please consult the 听Views听section of this document.)

听 The view will only show the results of the current scan.

5. Click听Save听to save the results and view properties of this scan. 听To cancel, click on the听Cancel

button.

Schedule Scans

A scan can be scheduled to run at predetermined intervals. Multiple schedules can be defined for a scan. If a scan has no schedule defined the text "schedule" will be displayed in the schedule column. If there are one or more schedules defined the date and time of the next run will be displayed.

Schedule a Scan

1.听 听Click on the听Scans听tab, then click on the听Scans听sub-tab.

2.听 听Locate the听Scheduled听column (on the far right).

3.听 听In the corresponding row, click on the text: It will either appear as "schedule" (meaning no schedule has been created yet), or it will show the date and time of the next scheduled run (meaning a schedule has already been created).

4.听 听Click on the听Add听button to define a schedule.

5.听 听Select the Schedule properties you require.

6.听 听Click on the听Save听button.

7.听 听When you return to the scans list, you will see the date and time of the next scheduled run.

If a scan is scheduled to run more than once per day, but the first run has not completed by the time the next run is scheduled to begin, then this next run will be skipped.

听

Example:

Schedules: Daily at 3:00pm, 3:30pm and 4:00pm.

If the scan takes 70 minutes to run, then there will be only 1 scan result per day.

听

Schedules use the time zone defined in the听User preferences听under听Settings. The default time is based on the locale set on the server hosting HiSoftware Compliance Sheriff. 听Hence, if a user in a different time zone wants to set a schedule on the actual date/time defined for the server, the time difference should be taken in consideration.

听

Edit a Scan Schedule

1.听 听Click on the听Scans听tab, then click on the听Scans听sub-tab.

2.听 听Click on the current schedule defined for the scan under the听Scheduled听column.

3.听 听You can edit the current听Schedule properties听defined: click听Add听to set another schedule for the scan, or click on the听Remove听link to remove a schedule.

4.听 听Click听Add听to define a new schedule.

5.听 听If you want to revert to a manual process, all schedules defined must be removed.

6.听 听Click听Save.

7.听 听On returning to the scans list, you will see the date and time of the next scheduled run, as defined by the schedule you created.

听

Delete a Scan Schedule

1.听 听Click on the听Scans听tab, then click on the听Scans听sub-tab.

2.听 听Click on the current schedule defined for the scan under the听Scheduled听column.

3.听 听Click on the听Remove听link in the far right column.

4.听 听Click听Save.

5.听 听A confirmation dialog box will appear. 听Click on听OK听to confirm deletion.

听

Views

A view is a presentation of data from the results database. 听A view may contain a graphical chart, a textual summary, or table of results.

听

When you click the听Views听tab, a list of the views you have created will appear, along with the date they were last modified. 听To see what a view looks like, click the听preview听icon in the appropriate row (the icon is a small magnifying glass). 听Similarly, you can also听generate a report听from any view. 听If you have created a long list of views, use the听Search听field to find the view you're looking for.

All dates and times displayed use the time zone specified in the user鈥檚 preferences.

Create a View

1.听 听Click the听Views听tab.

2.听 听Click听New.

3.听 听In the听Name听field, enter a name for the view.

4.听 听In the听Show results for听field, you will see three options: 听scans,听scan groups, or听monitors.

Choose which category you want the view to show results for.

5.听 听If you selected听scans听in Step 4, a Scans menu will appear in the field below. 听From this field, choose which scan or scans you would like to be associated with the view (you can select multiple items from each scroll-down menu by holding the CTRL button). 听If you selected听scan groups听on听monitors, the process is the same. 听If you have already run the scan(s), scan group, or monitor(s) associated with this view, a preview of the view will appear in the preview pane as you make your selections. 听ClickDisable auto-update听if you don't want the听preview pane to reload each time you make a change. 听If you choose this option, you can use the听Update听button to refresh the preview.

6.听 听In the Checkpoint Groups field (or Checkpoints field, if you've selected a monitor), select which checkpoint groups should appear in the view. 听(PLEASE NOTE: You can open or close each field on this page by clicking the arrow buttons in the upper right of each field.)

7.听 听In the Pages field, you can select the specific URLs that the view will display results for.

8.听 听Modify the听Chart, 听Summary, and听Table听fields as desired.

9.听 听Click the听Save听button.

鈥淪ave as new鈥� View

Saving a new view with a new name does not provide different or updated content compare to the content of the previous view.

Although multiple views can be created for different user groups, the very first view, which was created the very first time, retrieves information and gets updated every time a scan is run. Saving a new view would not save the current scan result to be retrieved later. Each time a scan is run all the views associated with the scan will be updated to the new scan result.

The comparison data from different scans will be available via the only view saved for the associated scan.听

Delete a View

1.听 听Click on the听Views听tab.

2.听 听Find the View you wish to delete and click in the checkbox to the left of its name, in the first column of the table.

3.听 听Click on the听Delete听button.

4.听 听A confirmation dialog box will appear. 听Select "OK" to confirm deletion.

If a View is being used in the Dashboard a different confirmation will appear: "One or more user dashboards refer to the View(s) you are deleting, and may not continue to function correctly." Choose听OK听to Delete, or听Cancel听to abort.

You can select more than one view to delete at a time.

View Properties

听

Name

This is the display name of the view, used in the title bar for tabs or panels on the dashboard, and as the title for any generated reports.

听

Properties for views showing scan results

Scans

From this field, choose which scan or scans you would like to be associated with the view. 听You can select multiple scans by holding the CTRL button. 听If you have already run the scan(s) associated with this view, a preview of the view will appear in the preview pane as you make your selections. 听Click听Disable auto-update听if you don't want the preview pane to reload each time you make a change. 听If you choose this option, you can use the听Update听button to refresh the preview.

听

Checkpoint Groups

In the Checkpoint Groups field, select which checkpoint groups should appear in the view. 听You can select multiple checkpoint groups by holding the CTRL button.

听

By default, the results for all checkpoint groups (as selected in the scan definitions) are included in the view. However, you may choose to report on specific groups.

听

Pages

In the Pages field, you can select specific URLs that the view will display results for. 听(PLEASE NOTE: Depending on the scans you've selected, this field may be blank.)

听

Chart

In the Chart field, you can select a type of chart to display the data you have selected.

听

Summary

In the Summary field, you can enable or disable the display of information from the scan summary in your view. 听This information can include any (or none) of the following items:

• Date/Time scan started
• Date/Time scan completed
• Number of pages scanned
• Number of checkpoints tested

View Tables

听

Tables for views showing scan results

The following table types are available:

听

Page compliance

The page compliance table shows the individual checkpoint results in an expandable tree, and includes a page count and percentage for each result type (Failed, Warning, Visual, Passed and N/A).

听

By default, the results can be grouped as follows:

• By result value, then page, then checkpoint group, then checkpoint
• By result value, then page, then checkpoint
• By result value, then scan, then page, then checkpoint group, then checkpoint.

You can customize groupings by accessing Table groupings, located in the Settings tab. 听Note that the first level of the Page compliance table should always be "Result".

听

Issue identification

The Issue Identification table shows the individual checkpoint results in an expandable tree, with columns for showing the number of failures in each top-level group.

听

By default, the table can be grouped as follows:

• By checkpoint group, then by checkpoint, then page
• By checkpoint group, then priority, then checkpoint, then page
• By scan, then by checkpoint group, then checkpoint, then page
• By scan, then page, then group, then checkpoint
• By checkpoint group, then priority, then page, then checkpoint
• By page, then checkpoint group, then checkpoint.

You can customize groupings by accessing Table groupings, located in the听Settings听tab.

Access the Show Instances Feature From a View

The show instances feature can be accessed from a view, but the view must be set to table type听Issue听identification听or听Occurrences. 听To change a view to one of these two table types, follow the instructions below. If you have already created a view with this table type, skip ahead to Step 6.

听

1.听 听Click on the听Views听tab.

2.听 听Click on the name of the View you wish to change.

3.听 听Click on the gray听Table听bar to open the Tables pull-down menu.

4.听 听From the听table type听pull-down menu, select "Issue identification" or "Occurrences". In the example shown below, "Issue identification" has been selected.

5.听 听Click on the听Save听button.

6.听 听Once the views main page has loaded, click on the preview icon (a magnifying glass) in the row associated with the view you want to examine.

7.听 听Locate the link associated with the page you want to open in the show instances feature, and click听on it.

8. The page will be opened in the show instances feature.

Appendix 1: Scan Levels

听

听

听