Get demo access
Creatio Benchmarks

What a Creatio setup should look like, written down

Creatio shows you every setting it has and never says what any of them should be. A benchmark is a checklist of what should be true about a setup, with a way to test each item and a way to fix it.

There are three, and each one asks one question.

  1. Is it safe?

    Who can see, change and delete things, and whether you can prove it.
    • Delete rights on custom objects must not be granted to a company-wide role
    • Entry points that answer without a signed-in user must be inventoried and justified
    • Bulk data export operations must be restricted to roles that require them
    • and 27 more
     Security Benchmark CSB 30 checks v0.5.0 Draft

  2. Is it built right?

    Whether what you built works the way you think it does.
    • Two live processes must not start on the identical trigger
    • A trigger must not wait on a column or object that no longer exists
    • An enabled trigger that never fires must be retired or repaired
    • and 8 more
     Implementation Benchmark CIB 11 checks v0.1.0 Draft

  3. Is it ready to go?

    Whether you can turn it on, keep it running and restore it when it breaks.
    • Production changes must be staged through a non-production environment
    • Every custom configuration element must be attributable to an identity
    • The production instance must have a rehearsed restore path
    • and 7 more
     Release Readiness Benchmark CRB 10 checks v0.2.0 Draft

Open a list and each check is called a control. That is the name you cite it by.

How we write them

Every check is written the same way.

We say what, not how

Every check says what should be true about your setup and never names a tool, not even ours. You can do all of them by hand.

One thing per check

If a check asks about two things that could pass or fail on their own, we split it into two.

“We could not check” is a real answer

A check passes, fails, or says we could not look. Nothing is marked passed when the proof was missing.

Ask us to check

Want us to run these on your Creatio?

We read your configuration and answer every control in the list, including the ones we could not check and why. The report goes to you and nowhere else.

We reply to the address you give us and use it for nothing else. See Data & privacy.

Every check lists the Creatio versions we tested it against. When Creatio ships a new one, we test them all again.

Published by ctx10. Not affiliated with, endorsed by, or sponsored by Creatio.