@nsethi - is the "authoritative source" module actually under the Configuration Compliance application in your left nav?  This is a different app all together, and not part of the GRC application, though tightly integrated.  I can explain more if you're interested, but for the purpose of UCF and pulling in content, the "authority documents" is what you still want to be looking at.