Section 1

Solution Overview

What Policy Pro is, why it exists, and how it helps your organization achieve compliance readiness.

Policy Pro is Exostar’s compliance automation tool that helps organizations build, maintain, and document security policies across all 14 CMMC domains. Rather than writing policies from scratch, users answer a structured questionnaire and Policy Pro uses those responses to automatically generate complete, audit-ready policy documents.

Policy Pro is built on a question-and-answer model. Each CMMC domain contains a set of questions about how your organization operates. Your answers become the factual foundation of every policy document generated, ensuring the output is specific to your organization and defensible in a compliance review.

Two Ways to Provide Answers

Policy Pro offers two methods for providing answers to the questions.

MethodBest Used When
Chat InterfaceYou are working through a policy interactively and want to answer questions one at a time with AI-guided prompts on the Policy Screen.
ImportYou need to collect answers offline, collaborate with subject matter experts who are not Policy Pro users, or update many answers at once.
Export/Import and Chat work togetherYou may choose either method to provide answers to the questions, or use a combination of both, whatever is easiest for you.

Key Capabilities

CapabilityDescription
Questionnaire ManagementAnswer questions for each of the 14 CMMC domains through the chat interface or via Import.
Progress TrackingSee completion status for every domain on the Main Screen with visual progress bars.
Policy GenerationGenerate complete policy documents automatically from your answers.
ExportDownload your questions and current answers as a CSV file for offline use or sharing.
ImportUpload a completed CSV file to bulk-update answers for one domain or across all domains.
Selective ImportReview every proposed change before applying, and choose exactly which answers to update.
Section 3

Main Screen

The Main Screen shows all 14 CMMC domains assigned to your organization, their completion progress, and access to questionnaire export and import.

Policy Pro Main Screen showing CMMC Domains with Export and Import buttons, completion statistics, and domain list

Figure 1 — The Policy Pro Main Screen showing CMMC Domains with completion statistics, Export and Import buttons, and the domain list with progress bars and status badges.

CMMC Domains

The CMMC Domains section shows all 14 CMMC domains. It contains the Export and Import buttons, a three-way completion summary, and the full domain list below.

Completion Summary

StatisticColourMeaning
CompleteGreenAll questions for this domain have been answered.
In-ProgressOrangeSome questions have been answered but the domain is not yet complete.
Not StartedRedNo questions have been answered for this domain.

Domain List

Each row shows the domain name, its two-letter CMMC domain code, a horizontal progress bar showing percentage completion or “All data provided”, and a coloured status badge. Click any domain row to open the Policy Screen for that domain.

Export and Import Buttons

The Export and Import buttons are located in the upper-right area of the CMMC Domains section. These buttons operate on the full questionnaire across all 14 domains. For domain-specific export and import, use the equivalent buttons at the bottom of the Policy Screen. Both are documented in Sections 8 and 9.

Section 4

Policy Screen

The Policy Screen opens when you click a domain on the Main Screen. It is a two-panel interface: a chat window on the left where you interact with Policy Pro to answer questions, and a policy document panel on the right.

Policy Pro Policy Screen showing chat interface on the left and blue welcome panel on the right, with Export and Import buttons at the bottom of the chat panel

Figure 2 — The Policy Screen showing the chat panel (left) with Export and Import buttons at the bottom, and the policy document panel (right).

Policy Screen Layout

AreaDescription
Chat panel (left)The main working area for the Chat interface. Policy Pro presents questions as a conversation and you type answers into the input field at the bottom. Previous messages appear above as a scrollable history.
Policy document panel (right)Initially shows a blue welcome screen reading “WELCOME! Generate precise governance policies in minutes.” Once you ask Policy Pro to generate your policy, the completed document appears here. You can edit text directly and apply Bold (B) or Italic (I) formatting using the toolbar at the top of this panel.
Export (bottom of chat)Downloads a CSV file of all questions and current answers for this domain only.
Import (bottom of chat)Opens the upload dialog to import a CSV file with answers for this domain.
AutosavePolicy Pro saves your work automatically. When active, a green Autosave success! indicator appears in the top-right of the policy document panel.
Section 5

Using the Chat Interface

The chat interface is one method for providing answers to the questionnaire. Policy Pro guides you through questions one at a time as a conversation.

How It Works

When you open a domain on the Policy Screen, Policy Pro presents the first unanswered question in the chat area. Each question appears as a numbered message. Read the question, type your answer in the text input at the bottom of the chat panel, then click the send button (►) or press Enter to submit. Policy Pro acknowledges your answer, records it, and presents the next question. This continues until all questions for the domain are answered.

Answering a Question Step by Step

  1. From the Main Screen, click the name of the domain. The Policy Screen opens.
  2. Read the question displayed in the chat panel. A numbered header marks each question in sequence.
  3. Click the text input field. The placeholder reads Need a policy? Start typing here…
  4. Type your answer and click the blue send button (►) or press Enter.
  5. Policy Pro confirms the answer and presents the next question.
  6. Continue until Policy Pro notifies you that all questions are complete.
Attach a file for contextClick the paperclip icon or drag and drop files onto the chat input area to attach supporting documents. A maximum of 5 files can be attached per message. Policy Pro can use the contents of attachments to help answer questions about your organization.

Chat Message Controls

ButtonFunction
⊞ (copy)Copies the message text to your clipboard.
👍 (thumbs up)Marks the response as helpful.
👎 (thumbs down)Marks the response as not helpful.
Section 6

Generating a Policy

Once the questionnaire for a domain is complete — whether answered through the chat interface or by importing a CSV — ask Policy Pro to generate the policy document.

How to Generate a Policy Document

  1. Open the Policy Screen for the domain you want to generate.
  2. Ensure every question in the domain questionnaire is answered — Policy Pro will not generate a policy document until all questions have a response. When complete, Policy Pro prompts you: “All questions for the [Domain] policy have been completed. Would you like me to generate the policy document now?”
  3. Type Yes (or any affirmative reply) in the chat input and click ► to send.
  4. Policy Pro generates the policy document and displays it in the right-hand panel, replacing the welcome screen.
  5. Review and edit the document directly in the right panel. Use the B (Bold) and I (Italic) toolbar buttons for formatting.
All questions must be answered before generatingPolicy Pro will not generate a policy document until every question in the domain questionnaire has been answered. The chat interface will prompt you to complete any remaining questions first.
Regenerate after importing new answersIf you import a CSV after a policy document has already been generated, you must ask Policy Pro in the chat to regenerate the document. The existing document does not update automatically.
Section 7

Export and Import — Overview

Export and Import provide another way to provide answers. Both the chat interface and Import can be used on the same domain — your answers are combined regardless of how they were entered. This section explains how to use Export or Import and where to find the buttons.

When to Use CSV

The CSV approach is useful when:

  • You need to collect answers from colleagues or subject matter experts who do not have Policy Pro access.
  • You already have answers documented elsewhere and want to upload them in bulk.
  • You want an offline snapshot of your questionnaire state.
  • You are updating a large number of answers at once.

Button Locations and Scope

LocationButtonsScope
Main Screen — CMMC Domains section (top right)Export and ImportAll 14 domains — single file covers the entire questionnaire.
Policy Screen — bottom of chat panelExport and ImportCurrent domain only.
Changes are never applied automaticallyUploading a CSV does not immediately overwrite your data. Policy Pro always shows a Review Extracted Answers dialog first so you can inspect every proposed change and decide which to apply.
Section 8

Exporting Data

Export your questionnaire as a CSV file to review offline, share with colleagues, or give to a subject matter expert to complete.

Export the Full Questionnaire (All Domains)

  1. On the Main Screen, locate the Export button in the upper-right of the CMMC Domains section.
  2. Click Export. Policy Pro downloads a CSV file containing all questions across all 14 domains. The Valid Response column is auto-populated with format guidance (e.g. TRUE/FALSE, NUMBER, TEXT ENTRY). The file is named PolicyPro_AllQuestions_YYYYMMDD_HHMMSS.csv.
  3. Open the file in Microsoft Excel or a similar application from your browser’s downloads folder.

Export a Single Domain

  1. From the Main Screen, click the domain you want to export. The Policy Screen opens.
  2. At the bottom of the chat panel, click Export.
  3. Policy Pro downloads a CSV file containing only the questions and current answers for this domain. The file is named PolicyPro_{DomainName}_Questions_YYYYMMDD_HHMMSS.csv (e.g. PolicyPro_AccessControl_Questions_20260327_143000.csv).

After downloading, your file will contain four columns:

Category/DomainQuestionValid ResponseAnswer
Access ControlHow many privileged users have access to your systems?Number12
Identification and AuthenticationWhat multi-factor authentication method is used?Text descriptionMicrosoft Authenticator app
Access ControlHow often are access rights reviewed?Frequency (e.g., Monthly, Quarterly)(no answer yet)
Access ControlWho is responsible for access control policy?Name or role title(no answer yet)

Figure 3 — Example exported CSV file. Only the Answer column should be edited.

Row ordering matches the Main ScreenRows in the exported file follow the same domain sequence shown on the Main Screen (Access Control first, then Awareness and Training, and so on). Within each domain, questions appear in the same order they are asked in the chat interface. This makes it easy to navigate the file and hand off specific sections to colleagues.
Section 9

Importing Data

Import a completed CSV file to update answers in bulk — for all domains at once from the Main Screen, or for a single domain from the Policy Screen.

Import from the Main Screen (All Domains)

  1. On the Main Screen, click Import in the upper-right of the CMMC Domains section.
  2. The Import dialog opens. Drag your CSV file into the upload area or click Browse files to select it.
  3. Policy Pro validates the file. If it cannot be read or the format is incorrect, an error message is displayed. Correct the file and try again.
  4. If valid, Policy Pro opens the Review Extracted Answers dialog. Proceed to Section 10.

Import into a Single Domain

  1. From the Main Screen, click the domain you want to update. The Policy Screen opens.
  2. At the bottom of the chat panel, click the blue Import button.
  3. The Import dialog opens. Drag your CSV file into the upload area or click Browse files.
  4. Policy Pro validates the file and, if valid, opens the Review Extracted Answers dialog. Proceed to Section 10.

File Requirements

RequirementDetail
File formatCSV (.csv) or Excel (.xlsx) — no conversion required.
Column headersRow 1 must contain exactly: Category/Domain, Question, Valid Response, Answer — in that order.
Question textMust exactly match the questions in Policy Pro. Do not edit this column.
Answer columnThe only column you should modify. Leave blank if no answer is available.

Unrecognized Questions

If the CSV contains a question that Policy Pro does not recognize — for example because the question text was accidentally edited — that row is skipped and a warning is shown on the Review Extracted Answers dialog. Only rows that exactly match a known question are processed.

Section 10

Reviewing and Applying Changes

After uploading a CSV or Excel file, Policy Pro displays the Review Extracted Answers dialog. This screen shows every answer found in the file alongside the current value so you can decide which changes to apply before committing them.

The Review Extracted Answers Screen

Review Extracted Answers dialog showing Category/Domain, Question, Current Answer, New Answer, and Status columns with Quick Actions and Import Values button

Figure: Review Extracted Answers — review and select which answers to import before applying.

Reading the Table

The dialog contains five columns:

ColumnWhat it shows
Category/DomainThe CMMC domain the question belongs to (e.g., Access Control).
QuestionThe full questionnaire question text.
Current AnswerThe answer already stored in Policy Pro before the import.
New AnswerThe answer found in the uploaded file.
StatusWhat will happen if the row is selected: + WILL UPDATE (existing answer changes), + WILL SET (blank answer filled in), or NO CHANGE (answers identical — cannot be selected).

Selecting Changes to Apply

Only checked rows are applied when you click Import (#) Answers. The number in parentheses reflects your current selection count (e.g., Import (3) Answers).

  • Individual checkbox — check or uncheck each row independently.
  • Select All Changes (Quick Actions) — checks all rows with WILL UPDATE or WILL SET status.
  • Deselect All (Quick Actions) — unchecks all rows.
  • Rows showing NO CHANGE cannot be selected — their current and new answers are identical.

Applying Changes

  1. Review the table and check the rows you want to apply.
  2. Use Select All Changes to quickly select every pending update, then uncheck any rows you want to skip.
  3. Click Import (#) Answers to apply the selected answers.

Canceling Without Applying

Click Cancel (top right of the dialog) to close without making any changes.

Unchecked rows are never modifiedOnly checked rows will be updated when you click Import. You can safely review the full list and apply only the answers you want.
Section 11

CSV File Format

Every file exported by Policy Pro, and every file accepted for import, uses exactly four columns. In a full-questionnaire export, rows are ordered by domain sequence as shown on the Main Screen, with questions in interview order within each domain.

ColumnDescriptionEdit on Import?
QuestionThe full text of the question as it appears in Policy Pro. Used to match rows to your questionnaire — must not be changed.No
Valid ResponseDescribes the expected format for the answer. Policy Pro populates this column automatically based on question type:
  • Boolean: TRUE/FALSE or YES/NO
  • Numeric: NUMBER with a unit hint (e.g. Ex: 15 minutes)
  • Duration / frequency: Ex: Quarterly or Ex: Every 90 days
  • Free text: TEXT ENTRY
  • Pick list: pipe-separated options (e.g. Daily | Weekly | Monthly)
  • Date: Ex: 2025-03-15 or Ex: MM/DD/YYYY
Do not edit this column.
No
AnswerYour answer to the question. This is the only column you should modify. Leave blank if no answer is available. Should conform to the Valid Response guidance.Yes — only this column
Category/DomainQuestionValid ResponseAnswer
Access ControlHow many privileged users have access to your systems?Number15
Identification and AuthenticationWhat multi-factor authentication method is used?Text descriptionMicrosoft Authenticator app
Access ControlHow often are access rights reviewed?Frequency (e.g., Monthly, Quarterly)Quarterly
Access ControlDescribe your session timeout policy.Text description(leave blank if unknown)

Figure 6 — Example CSV structure. Only the Answer column should be edited before reimporting.

Working with the File in Excel

  • Column A = Category/Domain. Do not edit.
  • Column B = Question. Do not edit.
  • Column C = Valid Response. Do not edit.
  • Column D = Answer. Edit only this column.
  • Save in any format — Policy Pro accepts both CSV (.csv) and Excel (.xlsx).
CSV and Excel both acceptedYou can import a .csv or .xlsx file directly — no conversion needed.
Section 12

Status Indicators

Policy Pro uses status badges throughout the application to communicate state at a glance.

Domain Status Badges (Main Screen)

BadgeMeaning
✓ CompletedAll questions answered. Progress bar is fully green showing “All data provided.”
⚡ In-ProgressSome questions answered. Progress bar is partially orange showing a percentage.
● Not StartedNo questions answered. Progress bar is empty showing “0% Completed.”

Import Change Status Chips (Review Extracted Answers Dialog)

ChipMeaningPre-selected?
Will UpdateThe CSV contains a different answer from what is currently stored. Applying this replaces the current answer.Yes
Will SetThe question is currently unanswered. Applying this fills it in for the first time.Yes
No ChangeThe CSV answer matches what is currently in Policy Pro. No update needed.No