Your first hour¶
One page for a new beta tenant. Follow the steps in order; each links to the guide that covers it in detail.
1. Sign in and turn on MFA¶
- Open the invitation, activate your account and sign in at
https://app.hodeishield.com. - Turn on multi-factor authentication in My account › Security: keep the recovery codes, which are shown only once.
- Detail: Getting started.
2. Import your 10 most critical suppliers¶
- Download the sample CSV: ten
fictitious suppliers on
example.comdomains. Replace its rows with your own. - Keep the header
name,domain,criticality. The first line of the file is treated as the header and skipped; columns are read by position. The delimiter can be a comma or a semicolon. - In criticality use
critico,alto,medioorbajo(critical,high,mediumandloware accepted too). An empty cell counts asmedio. - The name must be 2 to 200 characters and the domain must be valid (for example,
acme.com). The console accepts.csvfiles only. - Go to Vendors › Add vendor, upload the file under Import from CSV, review the preview and import. Rows with an error are listed with their line and the reason.
If you would rather not use a file, add them one by one: see Add your first vendor.
3. DORA guided setup¶
- Go to Compliance and open the Guided setup (
/compliance/first-run). Choose DORA if your plan includes it; otherwise the list shows which frameworks you can set up. - The Responsibilities step names one accountable person (A) per area. If the step offers Assign all areas to me, use it: one person takes every area, and each area stays editable afterwards. If your version does not offer it yet, choose yourself in each area.
- Progress is saved after every step, so you can stop and come back.
4. Upload or paste one policy¶
- In Compliance › Policy Library you can create a policy from a template or upload a document you already have.
- An uploaded file is stored and versioned. Control-coverage analysis from the text of the file is not yet available for every format: if the console offers to paste the policy text, use that path to measure coverage.
5. Where the first results appear¶
- From each vendor's detail page, select Request scan. The result is a 0 to 100 risk score with the findings that explain it; see Run a security scan.
- The Getting started guide (Settings › Getting started) ticks each step as you complete it.
- If something does not work, see troubleshooting or support during the beta.