Evaluating security controls of smaller vendors

In the IT Security team where I work, we currently use the Standarized Information Gathering or SIG tool to evaluate IT security posture of prospective 3rd party vendors. What I like about the SIG is the questions are standarized and depending on responses, only relevant follow up questions are asked.

At very small vendors though that may not have a dedicated IT or IT security function, a lot of the SIG questions may not apply. Currently, we are evaluating a smaller vendor providing a niche service and we are not comfortable with giving due diligence sign off due to the very limited responses provided on SIG questionnaire completed by such vendor. A lot of the controls and best practices on the SIG simply are not applicable due to vendor size. Furthermore, vendor will have remote access to our company infrastructure.

Question: what alternative approaches are viable for risk assessment of very small vendors in which market size is also small and competitors are of approximately same size, so switching vendors is not feasible?

Introducing inconsistent controls: is it appropriate for the sake of usability?

We’re building a web application based on Material UI. Throughout the app there are select components, which behave like shown in the example below: The default label informs about the functionality of the select and when a value is selected, this label shrinks and moves up, so that it is still shown above the selected value.

standard use case

We use those components mainly for standard “organizational” bulk operations, such as sort, group etc. Therefore, no value is selected by default, the default label is shown and the user should know what the control is there for.

However, we also have a settings page (and forms), where there are already set values, like language. This leaves the select in the state where that informational default label has already shrinked to its smaller size (and would always stay that way, since a language can’t be unselected).

Because of this, I’d like to change the select component here, so that the label isn’t shown at all and instead introduce another easy-to-read label that is placed above, like shown on the picture below.

pre-select use case

I feel like this would be a good approach in terms of usability, making the controls easier to recognize and thus helping the user change their settings. (Imagine a multitude of settings and looking for a specific one to change).

However, it also introduces inconsistencies, since there would be two kinds of select throughout the application.

I’d like to know whether those kinds of incosistencies are acceptable for the sake of better usability. Do the benefits outweigh the possibility of irritating the user? Maybe you could provide any related research or real life examples of similar inconsistencies for the sake of usability. Maybe there’s even a way to quantify those “pains vs gains”?

Any input is greatly appreciated!

How to choose the best type of controls to use in a toolbar?

I have a 3D view displaying two objects. One is the reference object, the other the user object. Displaying the two objects together allows the user to compare its own object to a reference object (these objects are gamuts).

Each object have three display modes (smooth, wireframe and flat) and an opacity selector (a slider ranging from 0 to 100).

There also are controls that are “gamuts independent” : a selector to chose from 2D to 3D, a “Top View” and a “Bottom View” buttons and a slider, called Gamut Slice on the following picture.

The picture represents what we have today, but we wish to redesign this window.

enter image description here

(The two check boxes “New Profile” and “Reference Profile” are not useful and will be deleted.)

I’d like to integrate all the control elements in a toolbar, but I don’t know which criterion are the best to determine the controls I should be using.

Especially, I would like to somehow regroup the display modes Smooth, Wireframe, and Flat together. I thought of two possible solutions : using three separate buttons (one for each mode), or using a combo box with the three modes. There are probably plenty of other possible solutions.

On what criterion should I make my choices ?

Who controls a summoned steed’s familiar?

The spell Find Steed allows you to cast a spell and have it also effect your steed.

While mounted on your steed, you can make any spell you cast that targets only you also target your steed.

In the targets section of the Players Handbook it states:

A spells description tells you whether the spell targets creatures, objects, or a point of origin for an area effect. (PHB, pg 204)

With the spell Find Familiar, it’s description clearly denotes that you are the target:

You gain the service of a familiar, a spirit that takes an animal form you choose: bat, cat, crab, frog (toad), hawk, lizard, octopus, owl, poisonous snake, fish (quipper), rat, raven, sea horse, spider, or weasel.

The spell indicates that you can’t have more than one familiar at a time, however in this case that would not be the result.

The PC casts Find Familiar and it’s effect targets the PC and (as per Find Steed) also targets the summoned steed. Tada! Two familiars appear, one bonded with the PC & one bonded the the steed.

Who controls the familiar bonded to the summoned steed, the GM or the Player?

Note: A Paladin with the ritual casting or magic initiate feat would be able to gain access to both spells, Find Steed & Find Familiar.

how to print an invoice without disappearing controls

I’m trying to print multiple controls in my java program by adding them into a pane then insert this pane into my printer job page, the page is printing but when i click on print all the printed controls disappear from my scene

PrinterJob job = PrinterJob.createPrinterJob();  BorderPane bpToPrint = new BorderPane(); bpToPrint.setCenter(tvGuestInvoiceOptionalServices); bpToPrint.setLeft(txtPaymentAmount); bpToPrint.setRight(dpGuestInvoiceCheckOutDate); bpToPrint.setTop(cmbGuestInvoiceGuestName); bpToPrint.setBottom(txtReportsTotalRevenu);   if(job.showPrintDialog(OntBill.stage.getOwner()) &&    job.printPage(bpToPrint))         job.endJob(); 

How do you input inverted form field controls?

I’m referring to the Windows OS equivalent of, e.g., Shift + Tab, etc.

At first I wanted to find out how to do so on the keyboard I use (refer to my other post), but I realized after some testing and further searching that I may be misunderstanding how the virtual keyboard inputs are even processed on Android; hoping to get a more general explanation on how form field controls are sent/handled, and proceed from there.