Creating your organization and choosing frameworks
How a company gets onboarded, and which standards it decides to measure itself against.
A company is onboarded once, by Miranium — that is deliberate rather than a limitation. The account answerable for a compliance record has to be somebody who actually works there, so the first owner is set up directly rather than through a self-serve signup a stranger could complete. A consultant or managed service provider working with that company is invited afterward, by the owner, as an outside provider.
How to use it
Once your organization exists, the first real decision is which frameworks apply to you. Settings shows every framework this product covers as a checkbox — 800-171, CMMC, HIPAA, ISO 27001, NIST CSF, and more — and only the ones you check appear when you start an assessment. An assessment you have already started keeps the frameworks it was created with, so changing this list later does not rewrite work already in progress.
Not sure which frameworks apply? Ask Mira, the assistant in the bottom-right corner, before you check anything — "what does CMMC Level 2 actually require of a company our size" is exactly the kind of question it answers, and it works even before you have picked a framework.
How to set it up
- Open Settings and fill in your organization profile — name, employee count, and whether you handle ITAR-controlled technical data. These are not preferences: every one of them is printed into the first paragraph of your System Security Plan.
- Check the frameworks you need to measure yourself against, under Frameworks.
- Save. The Compliance tab now offers "Start an assessment" against the frameworks you picked.