UCF "duplicate" citations

[Maros Takac1]

Hi,

would anyone who has been using UCF be able to explain the rationale behind their duplicate citations ? in the screenshot below, we have a bunch of citations, imported from UCF, with the same name/description; linked to the same authority document. The only unique attribute value is a source ID. Each citation is linked to a single control objective. My expectation is that there is only one citation per authority document with the same name/description; which is then linked to one or many control objectives. More importantly, things get very tricky when one has to create a new control objective internally and then link it back to a UCF citation. In this case, which citation would i link it back to ? all of them ? Reporting on this becomes a nightmare as you can imagine.

@Eric Feron - would you be able to look into it and advise on the reason SNOW creates multiple "content identical" citations ? Is it imposed by the UCF data model ? 

You can re-create the "issue" using the info below.

UCF Authority Document: "Hong Kong Monetary Authority: TM-G-1: General Principles for Technology Risk Management"

UCF Citation Reference: '4.3.3'

Any help would be appreciated.

Many thanks

[AlexLi]

Hi, 

Does anyone figure out how to solve this issue? It seems like the issue still existed in Orlando, patch 7. 

Many thanks!

Regards,

Alex Li

[Liju John1]

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0823679

Description

Duplicate control Objectives being created intermittently on downloading from UCF.

Steps to Reproduce

1. Go to Unified Compliance Framework.

2. Select a shared list and click Import Shared List on the popup.

3. Wait for the UCF download to complete and verify if there are any duplicate control objectives created.

Workaround

After carefully considering the severity and frequency of the issue, and the cost and risk of attempting a fix, it has been decided to not address this issue in any current or near future releases. We do not make this decision lightly, and we apologise for any inconvenience.

If there are duplicate control objectives created by the UCF download, execute the attached script "RemoveDuplicatesUCF.txt" from System Definition > Background scripts selecting scope as sn_compliance. Do not execute the script on a production instance without first ensuring to verify on a test instance.

Related Problem: PRB1372593

[Philip Green]

You will see what looks like duplicate citations from the UCF where the citation contains multiple mandates. You will notice that the UCF Source ID of these mandates are different. To understand the differences you will need to log into your UCF compliance hub and view the each entry to see which specific mandate within the citation each is referring to.