Administration

What is Administration?

The Administration module exists for Totem administrators to manage their Totem instance/tenant. Administrators can perform tasks such as creating/deleting organizations, purging users, disabling users, and re-seeding MFA.

To access the Administration module, admins can select their name in the top-right corner of Totem, and they'll see the Administration option.



 

How do I create a new organization?

To create a new organization in Totem, admins can navigate to the Organizations page. Here they'll see a "Create Organization" button:

Once selecting "Create Organization," admins will be presented with the following organization configuration options:

The organization configuration fields are as follows:

  • Name (required): The official name of the organization.
  • Alias (required): An abbreviated or minimal representation of the organization name. Recommended for use in the SSP when mentioning the organization. For instance, Totem Technologies, LLC = "TOTEM".
  • Description (optional): A brief overview of the company as it relates to their mission or cybersecurity compliance.
  • Assessment type (required): The cybersecurity framework (e.g, CMMC, ISO 27001, HIPAA 405d) to load upon first use. Note that loading a specific framework here will not prevent admins or organization owners from switching among other frameworks later.
  • Enable Privacy Controls (optional): Includes a "Privacy" control family in the list of security controls. Ideal for companies needing to implement privacy-specific controls, such as those in healthcare environments. See image below:

  • Lock Assessment Type (optional): Prevents organization owners from toggling between different cybersecurity frameworks (e.g., CMMC, ISO 27001, HIPAA 405d). Enabling this does not prevent instance admins from toggling between frameworks.