CCH Feature Prioritization High Priority Hitlist Research

This is a starting point to gather the potential most desirable features of the CCH.

Starting sources are internal staff experience and recollections from interactions with customers.

Customer validation will be forthcoming.

Does exist things they can’t live without

Feature	Benefit	Benefit Customer Confirmation	Comments
AD Lists	Allows customers to identify their compliance requirements Allows customers to break down their compliance requirements into groupings based on business needs	93% of active accounts have at least one AD list.
Builds	Allows customers to identify their compliance needs such as gaps and coverage in their internal frameworks.
Compare	New Versions: Identify gaps and coverage between New AD Versions. New Requirements: Identify gaps and coverage between current control set and new document(s) customer needs to comply with.	AT&T uses the compare feature when new versions of ASPR are mapped (confirmed via Userflow)
API Integration with GRC partners	Allows customers to manage and identify their compliance efforts in conjunction with our partner GRC offerings.
Attestation Portal https://cch.commoncontrolshub.com/pl-uuX2	Allows customers to share and track compliance requirements with stakeholders and other organizations outside the CCH.	49% of active accounts that have created AD lists have at least one published list. 37% of all active accounts have at least one published list.	JH: why is this important? what is evidence customers using it?

The benefit customer confirmation numbers are current as of 9/30/23

Feature	Risks	Benefit
See Citations tied to Common Controls
See only associated Common Controls in a List
Better AD Search Capabilities
New Version Notification
Clear indication of AD versions in UI