Automate Staff Scoping

Automating staff scoping helps you manage which employees are included in your security programme without manually updating each staff member. You can create staff groups based on employee attributes or manually selected members, import groups from supported identity providers, and use them to automatically mark staff as In scope or Not in scope for compliance monitoring.

Before you begin

• Ensure your staff have been imported into Sprinto from an identity provider or HRMS, or added manually.
• To create dynamic staff groups, the required staff attributes (such as role, department, or reporting manager) must be available in Sprinto.

Create a staff group

You can create staff groups manually or dynamically using staff attributes.

1. Log in to the Sprinto dashboard.
2. Navigate to Data Library > People.
3. Select the Configuration tab.
4. Under Automate staff scoping using groups, click Set up staff group.

5. In the dialog, click Create group.
6. Enter a Group name.

7. Choose one of the following options:
   1. Group staff using attributes to automatically include staff who match specified conditions.
   2. Group staff manually to select individual staff members.

Create a dynamic staff group

1. Select Group staff using attributes.
2. Choose a staff attribute, operator, and value to define the grouping rule.
3. Add additional rules or rule groups if required.
4. Review the list of matching staff members.
5. Click Create staff group.

The group automatically includes staff members who match the configured conditions.

Create a manual staff group

1. Select Group staff manually.
2. Select the staff members you want to include in the group.
3. Click Create staff group.

The selected staff members are added to the new group.

Import staff groups from your identity provider

If your identity provider or HRMS supports groups, you can import them into Sprinto instead of creating them manually.

1. Navigate to Data Library > People > Configuration.
2. Under Automate staff scoping using groups, click Manage.
3. Click Import group.

4. Select the identity provider or HRMS from which you want to import groups.
5. Review the provider details.
6. Click Add.

Sprinto imports the available staff groups and begins synchronising them with your provider.

Configure automated staff scoping

After creating or importing staff groups, configure which groups are considered in scope.

1. Navigate to Data Library > People > Configuration.
2. Under Automate staff scoping using groups, click Not Configured next to Staff group status.
3. In the Staff scope for infosec program panel, choose one of the following options:
   • All staff members are marked as in-scope to include every employee.
   • Smart scoping based on staff groups to scope staff based on selected groups.

4. If you selected Smart scoping based on staff groups, select the staff groups you want to mark as in scope.
5. Click Mark <number> group(s) as in-scope.

Sprinto automatically marks members of the selected groups as In scope, while members of other groups are marked as Not in scope.

Manage staff groups

After staff groups are created, you can manage them from Data Library > People > Configuration > Manage.

From here, you can:

• View all available staff groups.
• Create additional staff groups.
• Import more groups from connected identity providers.
• Review the members of each group before using them for automated scoping.