GRC Import

[cbryant]

I noticed a feature to import stuff from UCF; is there a way to import other data or is there predefined controls based off of the authority (NIST 800-53) since UCF database is not maintained and not cross walked to industry standards.

Also, is there a SAG that covers the GRC features in more n depth and scenario based instead of the wiki?

Thanks.

[tomoneil]

I have used ServiceNow for years, so I guess I "winged" it   Importing data is very simple.   Here is a great Wiki article to help.

http://wiki.servicenow.com/index.php?title=Easy_Import#gsc.tab=0

[cbryant]

Thank you, it is much appreciated

[Refocused Dad]

This is where I am now. New to GRC and trying to understand how to setup and import controls without UCF. If I understand this correctly, I need to get the controls into a spreadsheet, figure out the mapping to the profiles table and then import? Would you have any other helpful tips as we explore this application?

[Community Alums]

You should map to the Policy Statement table and then generate your Controls, not going straight to Controls unless you want to have adhoc ones without any statement assigned. 

[Community Alums]

Hi cbryant,

Did you try to contact Common Controls Hub? They are responsible for the data and they might have a new version coming up or they might help you to get that information into your account. 

I don't know if you are aware but currently, there is an issue with UCF integration but will be solved in the next releases (PRB1372593). Please raise HI ticket and associate PIB number to your case to have access in a non-production instance. 

Raf