Skip to main content

Understanding Thoropass's data models

J
Written by Joe Flores
Updated over a month ago

Have a question about our data models? Reach out to your CSM.

Have a question about Sigma functionality, including how to build workbooks, create charts, or building apps? See Sigma Documentation.

The data models that are currently accessible are:

  • Controls Schema

    • Unified Controls 1.0 Data Model

  • Tasks Schema

    • Tasks 1.0 Data Model

  • Audits Schema

    • Audits 1.0 Data Model

    • Evidence Request 1.0 Data Model

  • Users Schema

    • Workspace Users 1.0 Data Model

Unified Controls 1.0 Data Model

Unified Controls are the core list of controls created by Thoropass to aggregate similar controls across multiple frameworks. This is done to simplify the experience of managing multiple frameworks.

For example, if the customer has purchased access to frameworks SOC 2 and ISO 27001, they would find the respective framework controls "Privileged Access" (SOC 2) and "Privileged access rights" (ISO 27001) under the Unified Control "Privileged User Accounts".

To learn more about Unified Controls, see Understanding Unified Controls.

Variable

Description

UNIFIED_CONTROL_ID

The unique ID for this Unified Control in this workspace.

UNIFIED_CONTROL_NAME

The name of this Unified Control.
​
Unified Control names can be edited and this may differ from the default Unified Control name.

USER_ID

The unique ID for the owner of this Unified Control in this workspace.

To learn more about control owners, see What are control owners?

WORKSPACES

The workspace this Unified Control exists within.

HEALTH

The result of a formula that calculates the health status of this Unified Control.
​
Each control that is aggregated into this Unified Control has its own health status. The health status of a Unified Control is always the least healthy of its controls. i.e., all aggregated controls must be Healthy for the Unified Control to be healthy.

FRAMEWORK_ARRAY

An array of all the frameworks being aggregated into this Unified Control.

Tasks 1.0 Data Model

This model only surface open tasks. Tasks that are completed, or closed, do not appear.

Variable

Description

ID

The unique ID for this task in this workspace.

NAME

The name of this task.

DUE_DATE

The due date for this task.

ER_ID

The unique ID for the Evidence Request (ER) that this task is associated with.

UNIFIED_CONTROL_ID

The unique ID for the Unified Control this task is associated with.

TICKET_URL

The URL for the synced Jira ticket. This field will only populate for tasks with are synced with Jira.

WORKSPACE

The workspace this task is associated with.

UPDATED_AT

The last time this task was updated. Updating includes

CREATED_AT

The time that this task was created.

USER ID

The user this task has been assigned to, also known at the assignee.

STATUS

The status of this task. The two statuses are Completed and Not Completed.

TICKET_ID

The identifier for the synced Jira ticket, e.g., AB-4095. This field will only populate for tasks with are synced with Jira.

TICKET_STATUS

The status of the synced Jira ticket. This field will only populate for tasks with are synced with Jira.

TICKET_ASSIGNEES

A list of all assignees on the synced Jira ticket. This field will only populate for tasks with are synced with Jira.

TASK_TYPE

The type of task, according to Thoropass's internal compliance task categories.
​
The categories are as follows:
Action Item
Training
Policy Acknowledgement

Evidence

Policy Review

Access Review

Policy Review Changes

Integration

Monitor

Policy Approval

Audits 1.0 Data Model

Only active audits will be displayed. Past audits are not visible with this model.

Variable

Description

ID

The unique ID for this audit.

NAME

The name for this audit.

WORKSPACE

The workspace this audit is associated with.

Evidence Request 1.0 Data Model

Variable

Description

ID

The unique ID for this evidence request (ER).

DISPLAY ID

The display ID for this evidence request. All evidence requests will be display as ER-##.

NAME

The name of this evidence request.

WORKSPACE

The workspace this evidence request is associated with. This will always be the workspace that the audit is associated with.

FRAMEWORKS

The frameworks this evidence request is associated with.

AUDIT_ID

The unique ID for the audit this evidence request is associated with.

USER_ID

The unique ID of the user this evidence request is assigned to.

STATUS

The status of this evidence request.
​
The statuses are as follows:
Open - This evidence requests is accepting evidence.
Submitted - Evidence has been submitted for this evidence request.
Auditor Accepted - The auditor has accepted the submitted evidence.

RELATED CONTROLS

A list of all framework controls associated with this evidence request, represented by their control IDs.

UPDATED_AT

The last time this evidence request was updated.

Workspace Users 1.0 Data Model

Variable

Description

ID

The unique ID for this user.

NAME

The first and last name of this user.

USER_EMAIL

The email address of this user.

WORKSPACE_ARRAY

A list of workspaces this user has access to. The user must accept their workspace invite and be an active user to have access to that workspace.

LAST_THOROPASS_LOGIN

The last time this user logged into Thoropass.

Did this answer your question?