UCF "duplicate" citations

[Maros Takac1]

Hi,

would anyone who has been using UCF be able to explain the rationale behind their duplicate citations ? in the screenshot below, we have a bunch of citations, imported from UCF, with the same name/description; linked to the same authority document. The only unique attribute value is a source ID. Each citation is linked to a single control objective. My expectation is that there is only one citation per authority document with the same name/description; which is then linked to one or many control objectives. More importantly, things get very tricky when one has to create a new control objective internally and then link it back to a UCF citation. In this case, which citation would i link it back to ? all of them ? Reporting on this becomes a nightmare as you can imagine.

@Eric Feron - would you be able to look into it and advise on the reason SNOW creates multiple "content identical" citations ? Is it imposed by the UCF data model ? 

You can re-create the "issue" using the info below.

UCF Authority Document: "Hong Kong Monetary Authority: TM-G-1: General Principles for Technology Risk Management"

UCF Citation Reference: '4.3.3'

Any help would be appreciated.

Many thanks

[SanjivMeher]

I think we need a fix in the transform map, to make the name of the citation and authority document as coalesce.

But I am not sure, why ServiceNow hasn't done that from so long. So many customers are using it and why no-one has a problem with it.

[Community Alums]

@Sanjiv Meher true story, I didn't had time to confirm what have been performed in the new version but they might changed a bit the logic. This issue only happens if you try to reload the data, in the initial load everything goes smoothly that's why they never noticed. No need for any action from your side, this issue has been fixed already (aprox. 2 month ago), you just need to chase HI support to get the last version installed in your instance. SNGRC is in good hands 🙂

Regarding your question @Maros Takac, yes if you don't mind post in the community for future reference. I am not fully aware of the UCF data model and this might be useful for future if we can to replicate this behaviour to other sources of truth bringing to GRC different Authority Documents such as Money Laundering Regulation, etc. Another thing worth to consider is, adding more fields might be easier than we might be expecting because all the logic is already there and you just need to collect and map them properly. If you want to explore this option, give me a shout. My email address is "rafael.cardoso@wrangu.com". 

Stay safe everyone! 
Many thanks,
Raf

[Maros Takac1]

@Sanjiv Meher As I said before, our plan of action involves first talking to UCF in order to find out why this model was adopted. I am pretty sure they have some valid reasons for doing so. I`d suggest against making any modifications until we have received and shared feedback from UCF. Once we have it, you can evaluate it and then decide on your next move. 

[kmac2]

Maros,

Not sure if you have found a solution to your problem, but here is Unified Compliance's explanation of duplicate citations:

There are 2 scenarios in which UCF content may appear to be duplicated.

1. The same Citation appears more than once
   Some citations contain more than one mandate within the text. Because mandates are mapped to Common Controls, the UCF team identifies every mandate within a citation individually. This results in a citation displaying every time a mandate is identified within the citation. So, if the citation has 3 mandates, the citation will appear 3 times for each of the identified mandates.
   This scenario is expected and normal.
   
   
2. The same Common Control appears more than once
   Sometimes different citations in an Authority Document are mapped to the same control. This occurs typically occurs when there is repetition within the Authority Document or the UCF has a more general Common Control that the mandates identified within the citations map to.
   The CCH de-duplicates these Common Controls for you in the interface and the exports.
   
   If you are using the API, you need to use the following endpoints to de-duplicate /cch-ad-list/{list-id}/tracked-controls ; GET /cch-ad-list/{list-id}/tracked-controls/details
   
   

You are welcome to contact our support at 702-776-9898 or support@unifiedcompliance.com. And I would be happy to arrange a conversation between you and our guy who knows this API stuff inside and out.

Best-

Kerry MacInnes
Unified Compliance
702.805.2643

[Maros Takac1]

Hello Kerry,

thank you for your reply. If you could arrange a conversation with one of your API specialists, that would be very much appreciated. Sometime next week would be ok with me...

Cheers

Maros