Policy Pro
User Guide
A complete reference for navigating Policy Pro, answering questionnaires through the chat interface, and managing questionnaire data with Export and Import.
Solution Overview
What Policy Pro is, why it exists, and how it helps your organization achieve compliance readiness.
Policy Pro is Exostar’s compliance automation tool that helps organizations build, maintain, and document security policies across all 14 CMMC domains. Rather than writing policies from scratch, users answer a structured questionnaire and Policy Pro uses those responses to automatically generate complete, audit-ready policy documents.
Policy Pro is built on a question-and-answer model. Each CMMC domain contains a set of questions about how your organization operates. Your answers become the factual foundation of every policy document generated, ensuring the output is specific to your organization and defensible in a compliance review.
Two Ways to Provide Answers
Policy Pro offers two methods for providing answers to the questions.
| Method | Best Used When |
|---|---|
| Chat Interface | You are working through a policy interactively and want to answer questions one at a time with AI-guided prompts on the Policy Screen. |
| Import | You need to collect answers offline, collaborate with subject matter experts who are not Policy Pro users, or update many answers at once. |
Key Capabilities
| Capability | Description |
|---|---|
| Questionnaire Management | Answer questions for each of the 14 CMMC domains through the chat interface or via Import. |
| Progress Tracking | See completion status for every domain on the Main Screen with visual progress bars. |
| Policy Generation | Generate complete policy documents automatically from your answers. |
| Export | Download your questions and current answers as a CSV file for offline use or sharing. |
| Import | Upload a completed CSV file to bulk-update answers for one domain or across all domains. |
| Selective Import | Review every proposed change before applying, and choose exactly which answers to update. |
Main Screen
The Main Screen shows all 14 CMMC domains assigned to your organization, their completion progress, and access to questionnaire export and import.
Figure 1 — The Policy Pro Main Screen showing CMMC Domains with completion statistics, Export and Import buttons, and the domain list with progress bars and status badges.
CMMC Domains
The CMMC Domains section shows all 14 CMMC domains. It contains the Export and Import buttons, a three-way completion summary, and the full domain list below.
Completion Summary
| Statistic | Colour | Meaning |
|---|---|---|
| Complete | Green | All questions for this domain have been answered. |
| In-Progress | Orange | Some questions have been answered but the domain is not yet complete. |
| Not Started | Red | No questions have been answered for this domain. |
Domain List
Each row shows the domain name, its two-letter CMMC domain code, a horizontal progress bar showing percentage completion or “All data provided”, and a coloured status badge. Click any domain row to open the Policy Screen for that domain.
Export and Import Buttons
The Export and Import buttons are located in the upper-right area of the CMMC Domains section. These buttons operate on the full questionnaire across all 14 domains. For domain-specific export and import, use the equivalent buttons at the bottom of the Policy Screen. Both are documented in Sections 8 and 9.
Policy Screen
The Policy Screen opens when you click a domain on the Main Screen. It is a two-panel interface: a chat window on the left where you interact with Policy Pro to answer questions, and a policy document panel on the right.
Figure 2 — The Policy Screen showing the chat panel (left) with Export and Import buttons at the bottom, and the policy document panel (right).
Policy Screen Layout
| Area | Description |
|---|---|
| Chat panel (left) | The main working area for the Chat interface. Policy Pro presents questions as a conversation and you type answers into the input field at the bottom. Previous messages appear above as a scrollable history. |
| Policy document panel (right) | Initially shows a blue welcome screen reading “WELCOME! Generate precise governance policies in minutes.” Once you ask Policy Pro to generate your policy, the completed document appears here. You can edit text directly and apply Bold (B) or Italic (I) formatting using the toolbar at the top of this panel. |
| Export (bottom of chat) | Downloads a CSV file of all questions and current answers for this domain only. |
| Import (bottom of chat) | Opens the upload dialog to import a CSV file with answers for this domain. |
Using the Chat Interface
The chat interface is one method for providing answers to the questionnaire. Policy Pro guides you through questions one at a time as a conversation.
How It Works
When you open a domain on the Policy Screen, Policy Pro presents the first unanswered question in the chat area. Each question appears as a numbered message. Read the question, type your answer in the text input at the bottom of the chat panel, then click the send button (►) or press Enter to submit. Policy Pro acknowledges your answer, records it, and presents the next question. This continues until all questions for the domain are answered.
Answering a Question Step by Step
- From the Main Screen, click the name of the domain. The Policy Screen opens.
- Read the question displayed in the chat panel. A numbered header marks each question in sequence.
- Click the text input field. The placeholder reads Need a policy? Start typing here…
- Type your answer and click the blue send button (►) or press Enter.
- Policy Pro confirms the answer and presents the next question.
- Continue until Policy Pro notifies you that all questions are complete.
Chat Message Controls
| Button | Function |
|---|---|
| ⊞ (copy) | Copies the message text to your clipboard. |
| 👍 (thumbs up) | Marks the response as helpful. |
| 👎 (thumbs down) | Marks the response as not helpful. |
Generating a Policy
Once the questionnaire for a domain is complete — whether answered through the chat interface or by importing a CSV — ask Policy Pro to generate the policy document.
How to Generate a Policy Document
- Open the Policy Screen for the domain you want to generate.
- Ensure every question in the domain questionnaire is answered — Policy Pro will not generate a policy document until all questions have a response. When complete, Policy Pro prompts you: “All questions for the [Domain] policy have been completed. Would you like me to generate the policy document now?”
- Type Yes (or any affirmative reply) in the chat input and click ► to send.
- Policy Pro generates the policy document and displays it in the right-hand panel, replacing the welcome screen.
- Review and edit the document directly in the right panel. Use the B (Bold) and I (Italic) toolbar buttons for formatting.
Export and Import — Overview
Export and Import provide another way to provide answers. Both the chat interface and Import can be used on the same domain — your answers are combined regardless of how they were entered. This section explains how to use Export or Import and where to find the buttons.
When to Use CSV
The CSV approach is useful when:
- You need to collect answers from colleagues or subject matter experts who do not have Policy Pro access.
- You already have answers documented elsewhere and want to upload them in bulk.
- You want an offline snapshot of your questionnaire state.
- You are updating a large number of answers at once.
Button Locations and Scope
| Location | Buttons | Scope |
|---|---|---|
| Main Screen — CMMC Domains section (top right) | Export and Import | All 14 domains — single file covers the entire questionnaire. |
| Policy Screen — bottom of chat panel | Export and Import | Current domain only. |
Exporting Data
Export your questionnaire as a CSV file to review offline, share with colleagues, or give to a subject matter expert to complete.
Export the Full Questionnaire (All Domains)
- On the Main Screen, locate the Export button in the upper-right of the CMMC Domains section.
- Click Export. Policy Pro downloads a CSV file containing all questions across all 14 domains. The Valid Response column is auto-populated with format guidance (e.g.
TRUE/FALSE,NUMBER,TEXT ENTRY). The file is namedPolicyPro_AllQuestions_YYYYMMDD_HHMMSS.csv. - Open the file in Microsoft Excel or a similar application from your browser’s downloads folder.
Export a Single Domain
- From the Main Screen, click the domain you want to export. The Policy Screen opens.
- At the bottom of the chat panel, click Export.
- Policy Pro downloads a CSV file containing only the questions and current answers for this domain. The file is named
PolicyPro_{DomainName}_Questions_YYYYMMDD_HHMMSS.csv(e.g.PolicyPro_AccessControl_Questions_20260327_143000.csv).
After downloading, your file will contain four columns:
| Category/Domain | Question | Valid Response | Answer |
|---|---|---|---|
| Access Control | How many privileged users have access to your systems? | Number | 12 |
| Identification and Authentication | What multi-factor authentication method is used? | Text description | Microsoft Authenticator app |
| Access Control | How often are access rights reviewed? | Frequency (e.g., Monthly, Quarterly) | (no answer yet) |
| Access Control | Who is responsible for access control policy? | Name or role title | (no answer yet) |
Figure 3 — Example exported CSV file. Only the Answer column should be edited.
Importing Data
Import a completed CSV file to update answers in bulk — for all domains at once from the Main Screen, or for a single domain from the Policy Screen.
Import from the Main Screen (All Domains)
- On the Main Screen, click Import in the upper-right of the CMMC Domains section.
- The Import dialog opens. Drag your CSV file into the upload area or click Browse files to select it.
- Policy Pro validates the file. If it cannot be read or the format is incorrect, an error message is displayed. Correct the file and try again.
- If valid, Policy Pro opens the Review Extracted Answers dialog. Proceed to Section 10.
Import into a Single Domain
- From the Main Screen, click the domain you want to update. The Policy Screen opens.
- At the bottom of the chat panel, click the blue Import button.
- The Import dialog opens. Drag your CSV file into the upload area or click Browse files.
- Policy Pro validates the file and, if valid, opens the Review Extracted Answers dialog. Proceed to Section 10.
File Requirements
| Requirement | Detail |
|---|---|
| File format | CSV (.csv) or Excel (.xlsx) — no conversion required. |
| Column headers | Row 1 must contain exactly: Category/Domain, Question, Valid Response, Answer — in that order. |
| Question text | Must exactly match the questions in Policy Pro. Do not edit this column. |
| Answer column | The only column you should modify. Leave blank if no answer is available. |
Unrecognized Questions
If the CSV contains a question that Policy Pro does not recognize — for example because the question text was accidentally edited — that row is skipped and a warning is shown on the Review Extracted Answers dialog. Only rows that exactly match a known question are processed.
Reviewing and Applying Changes
After uploading a CSV or Excel file, Policy Pro displays the Review Extracted Answers dialog. This screen shows every answer found in the file alongside the current value so you can decide which changes to apply before committing them.
The Review Extracted Answers Screen
Figure: Review Extracted Answers — review and select which answers to import before applying.
Reading the Table
The dialog contains five columns:
| Column | What it shows |
|---|---|
| Category/Domain | The CMMC domain the question belongs to (e.g., Access Control). |
| Question | The full questionnaire question text. |
| Current Answer | The answer already stored in Policy Pro before the import. |
| New Answer | The answer found in the uploaded file. |
| Status | What will happen if the row is selected: + WILL UPDATE (existing answer changes), + WILL SET (blank answer filled in), or NO CHANGE (answers identical — cannot be selected). |
Selecting Changes to Apply
Only checked rows are applied when you click Import (#) Answers. The number in parentheses reflects your current selection count (e.g., Import (3) Answers).
- Individual checkbox — check or uncheck each row independently.
- Select All Changes (Quick Actions) — checks all rows with WILL UPDATE or WILL SET status.
- Deselect All (Quick Actions) — unchecks all rows.
- Rows showing NO CHANGE cannot be selected — their current and new answers are identical.
Applying Changes
- Review the table and check the rows you want to apply.
- Use Select All Changes to quickly select every pending update, then uncheck any rows you want to skip.
- Click Import (#) Answers to apply the selected answers.
Canceling Without Applying
Click Cancel (top right of the dialog) to close without making any changes.
CSV File Format
Every file exported by Policy Pro, and every file accepted for import, uses exactly four columns. In a full-questionnaire export, rows are ordered by domain sequence as shown on the Main Screen, with questions in interview order within each domain.
| Column | Description | Edit on Import? |
|---|---|---|
| Question | The full text of the question as it appears in Policy Pro. Used to match rows to your questionnaire — must not be changed. | No |
| Valid Response | Describes the expected format for the answer. Policy Pro populates this column automatically based on question type:
| No |
| Answer | Your answer to the question. This is the only column you should modify. Leave blank if no answer is available. Should conform to the Valid Response guidance. | Yes — only this column |
| Category/Domain | Question | Valid Response | Answer |
|---|---|---|---|
| Access Control | How many privileged users have access to your systems? | Number | 15 |
| Identification and Authentication | What multi-factor authentication method is used? | Text description | Microsoft Authenticator app |
| Access Control | How often are access rights reviewed? | Frequency (e.g., Monthly, Quarterly) | Quarterly |
| Access Control | Describe your session timeout policy. | Text description | (leave blank if unknown) |
Figure 6 — Example CSV structure. Only the Answer column should be edited before reimporting.
Working with the File in Excel
- Column A = Category/Domain. Do not edit.
- Column B = Question. Do not edit.
- Column C = Valid Response. Do not edit.
- Column D = Answer. Edit only this column.
- Save in any format — Policy Pro accepts both CSV (.csv) and Excel (.xlsx).
Status Indicators
Policy Pro uses status badges throughout the application to communicate state at a glance.
Domain Status Badges (Main Screen)
| Badge | Meaning |
|---|---|
| ✓ Completed | All questions answered. Progress bar is fully green showing “All data provided.” |
| ⚡ In-Progress | Some questions answered. Progress bar is partially orange showing a percentage. |
| ● Not Started | No questions answered. Progress bar is empty showing “0% Completed.” |
Import Change Status Chips (Review Extracted Answers Dialog)
| Chip | Meaning | Pre-selected? |
|---|---|---|
| Will Update | The CSV contains a different answer from what is currently stored. Applying this replaces the current answer. | Yes |
| Will Set | The question is currently unanswered. Applying this fills it in for the first time. | Yes |
| No Change | The CSV answer matches what is currently in Policy Pro. No update needed. | No |