The CreatorCon Call for Content is officially open! Get started here.

UCF and Custom Control Objectives

Mehernosh Amrol
Giga Guru

Hi Team,

Just curious, if I have been maintaining my own Control Objectives and now want to use UCF, is there any conflicts of keeping both? Pros and cons?

1 ACCEPTED SOLUTION

Community Alums
Not applicable

Hi @Mehernosh Amroli ,

You can keep maintaining your own Control Objectives, now once UCF integrates, you will have authority documents, citations and more of Control Objectives being imported. so once UCF is integrated just cross verify if any of the Control Objectives is matching to the ones which you are already maintaining.

When UCF updates an authority document or control objective, we do not change the status of the control. If the authority document or a control objective is deprecated, we mark the controls as inactive.

Mark my answer correct & Helpful, if Applicable.

Thanks,

Sandeep

View solution in original post

5 REPLIES 5

Mohammed Kemal
Tera Guru

Hi @Mehernosh Amrol  - You currently have a manually created authorization package in CAM, including authority documents, citations, and control objectives. You also possess a UCF license for importing similar data. There's no inherent conflict between these two sources, though potential naming overlaps exist. To differentiate, consider adding prefixes to the manually created items. You can continue using your current manual package until its re-authorization. At that point, transition to a new package generated from the imported UCF data, eventually retiring the manual components.

Mark my answer correct & Helpful, if Applicable.

Thanks,

Mo

If I could help you with your Query then, please hit the Thumb Icon and mark as Correct !!