Easy (and free) ways to import ISO27k as Authority Documents?

[Sebastian Casac]

Hi all - first question here so bear with me if I get things wrong....

A client of ours is in the process of setting up and rolling out Policy and Compliance. They want to have ISO27001/2 in their instance so they can map their own control objectives to it. Of course they have purchased the standard from ISO

What would be the smartest way to get the standard into the system? From the ServiceNow docs I get that they can either get it through the Thomson Reuters integration or through the Compliance UCF application - however, as far as I understand, both of them require an additional subscription for their respective products, which our client doesn't have.

Do any of know a smart way to import ISO27k content into ServiceNow other than....

a) getting an intern to copy&paste an import sheet OR

b) trying to convert the epub-file you get from ISO into a usable import format?

Thanks in advance!

Regards

Sebastian

[Community Alums]

Hi Sebastian,

You can import the framework via UCF but if its not available in the Common Hub platform, you can use the integrator to create the entire framework in one click.

Check this article Using the GRC: Policy and Compliance integrator to... - ServiceNow Community

Sounds more complex than it is 🙂 

[Sebastian Casac]

Thank you for your reply! Just to clarify: Is the import via UCF possible without actually subscribing to UCF? I figured that you need an API user to connect the ServiceNow UCF app to the site, but it appears that you only get one with the paid subscription.

Could you please confirm or correct my understanding?

Thanks in advance!

[ShafrazMubarak]

Once you received an active subscription from UCF, you can create builds from there. There is away from UCF to import them as excel sheet, but it will not come in the format you might need for ServiceNow import. THe UCF admin can generate API keys and from API Integration, you can import the data from the selected build. 

[Sebastian Casac]

Still looking for helpful insights here.

It may be due to my lack of experience, but specifically I fail to see how writing API code for the integrator is easier/quicker than building some import sheets for content. Can anyone provide some use cases when to use the one or the other?

Thanks in advance!

Sebastian