Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Findings Knowledge Base: the findings knowledge base (KB) acts as a repository for reusable write-ups for findings. The main point of reusable content is to ensure consistency, but only where it's required. The existence of a KB shouldn't mean clients receive generic content, but it does allow users to have a starting point for tailoring content, and to use common information where it makes sense.
  • Report templates: template reports are used for building the end-user reports you want to send to your clients. These are built using a simple form builder inside of Canopy, and then mapped to Word documents (see more in LINK).
  • Template statements of work: much like template reports, the template statement of work (SoW) is used to produce custom, company branded, SoWs or proposals for issuing to your clients. The process is the same, although the data these document templates access is different.
  • Methodology templates: methodologies are commonly used to establish best practices within service delivery organisations. The template methodology section is used to define such methodologies, which can then be used in for delivery as required.
  • Template messages: template messages are used to build standard messages for user and client notification. Do you have a standard set of emails you send out before, during and after tests? This feature allows you to build those templates in Canopy.
  • Template taxonomies: template taxonomies provide a way of linking findings to external (e.g. CWE) and internal/client (e.g. client-specific secure development requirements) reference material, in a way that can then be included in reports or analytics. 
  • Template scoping questionnaires: in order to scope projects, its typical to use questionnaires to capture mandatory and nice-to-have information for preparing for delivery. Reusable questionnaires help with consistency in this approach.

Other tasks

  • Working with Jira: how to work with Jira from Canopy to help share information between testers and development/ops teams.