Best process for loading authority document, citations, control objectives

Shirl22
Tera Contributor

My organization wants to load IRS 1075 regulations as an authority document with related citations and turn the citations into control objectives. What's the best process to do this? We had a vendor partner assist with the initial creation of our authority documents (NIST 800-53 and CIS v8), and our current control objectives are based on our organizational policies which are based on/inspired by the authority documents. 

 

I'd also like to know how best to create control objectives from NIST 800-53 citations. 

 

Many thanks for your help. 

 

We're currently in San Diego and will be moving to Tokyo a bit later this year.