Onboard a new client's compliance (MSPs)

Before you start

• Who can do this: Anyone with a GRC role that can view compliance data can read the page; only a GRC administrator can change roles or settings
• Plan: GRC Compliance Platform (included in Complete). GRC Client Onboarding (included in Professional and Complete). See pricing.
• Where to start: open Compliance Settings in your console.

Steps

1. Fill in the client profile. Client Profile, Save Profile

   Run every new client through the same onboarding steps, see where each client stands, and let Lavawall detect progress for you.

   From the article: How to fill in the client profile

   1. Open the client and select Client Profile.
   2. Choose Industry, Sub-industry, Country and Province/State, and enter Employee count and Target device count.
   3. Set Current email and Target email, and tick any Compliance requirements that apply: PCI DSS (payment cards), US healthcare (HIPAA), US government clients (NIST 800-171 / CMMC), Canadian defence supplier (CPCSC), Publicly traded (SOX / C-SOX) or Needs email migration.
   4. Review Suggested frameworks, then select Save Profile.
   5. Turn the suggested frameworks on from the Frameworks page, or run the Compliance Wizard for a fuller analysis.

   Open MSP Client Onboarding in your console →

2. Start onboarding. Assign a technician and target date

   From the article: How to start onboarding a client

   1. On All Clients, find the client and select Start.
   2. In Start onboarding, select Set Profile First if the client profile is not filled in yet (recommended).
   3. Enter Assigned to (the technician) and a Target completion date.
   4. Select Start Onboarding.

   Open MSP Client Onboarding in your console →

3. Auto-detect progress. After agents and Microsoft 365 are connected

   Open MSP Client Onboarding in your console →

4. Run the Compliance Wizard. Adopt the client's frameworks

   Answer a few questions about your organization to find out which frameworks and regulations apply, see your gaps, generate your first policies and get a prioritized action plan.

   From the article: How to find the frameworks that apply to you

   1. On Profile, answer each question. Select every country or region and every type of sensitive data that applies.
   2. Select Analyze My Requirements.
   3. Review Your Applicable Frameworks. Use Select Required to pick the ones you must meet, or select others by hand.
   4. Select Adopt selected frameworks to add them to your compliance program. Frameworks you already have are left alone.

   Open Compliance Wizard in your console →

5. Give client staff GRC roles. Approver, contributor, viewer

   Decide who can do what in your compliance program and set the rules that every compliance page follows for your organization.

   From the article: How to change someone's compliance role

   1. In Who can do what, find the person.
   2. Open the role list on their row and choose a role, or choose Follow console role to go back to the automatic role.
   3. Read the description in the confirmation and select Change role.
   4. The row updates and shows "Set here" or "From console role" under the picker.

   Open Compliance Settings in your console →

6. Sync the people register. Sync from directory

   Keep a register of joiners, leavers and background checks, and spot any leaver whose account is still switched on.

   From the article: How to sync from your directory

   1. Select Sync from directory.
   2. The Directory sync summary shows how many accounts were read, added, updated and marked as leavers.
   3. If any leaver still has an enabled account, the summary says so and an issue is raised for each one. Disable those accounts, then sync again to close the red flags.

   Open People Security in your console →

7. Generate issues from findings. Decide who is responsible for each

   Keep one list of everything that needs fixing, who is responsible for it, who is doing it, when it is due and where it stands.

   From the article: How to generate issues from findings

   1. Select Generate from findings.
   2. Tick the sources to use: Failing automated checks, "No" answers in the latest assessments and, where available, Resilience follow-up findings.
   3. Select Generate. The summary shows how many issues were created, reopened, updated and closed. Issues whose finding has gone away are closed; your own responsibility, assignee, due date and status choices are kept.

   Open Issues & Remediation in your console →

When you are done

The client's profile, frameworks, roles, people register, and open issues are all set up.

Articles for the pages in this guide

• Compliance Settings: Decide who can do what in your compliance program and set the rules that every compliance page follows for your organization.
• Compliance Wizard: Answer a few questions about your organization to find out which frameworks and regulations apply, see your gaps, generate your first policies and get a…
• Issues & Remediation: Keep one list of everything that needs fixing, who is responsible for it, who is doing it, when it is due and where it stands.
• MSP Client Onboarding: Run every new client through the same onboarding steps, see where each client stands, and let Lavawall detect progress for you.
• People Security: Keep a register of joiners, leavers and background checks, and spot any leaver whose account is still switched on.

Still need help?

Search the support centre, or contact our support team and tell us which step you are on:

• Chat now: use the chat button in the bottom-right corner of this page to reach our team right away. Where cookie consent is needed, the chat starts after you accept (cookie settings).
• Email: send our support team a message through the contact page. It goes straight to a person.
• Phone: AB: 1-403-538-5053, BC: 1-778-731-1339, ON: 1-289-724-8829, US: 1-406-988-7333, UK: +44 20 3695 9786.

← All task guides