The table below lists the attributes available for importing controls:
Attribute | Description |
---|---|
ControlDescription | Any additional information that helps understand the purpose of creating a control. |
ControlDescriptor | Enter the identifier of a control. |
ControlGuidance | Provide detail information for the efficient use of a control. |
ControlOtherInfo | Enter other details of a control. This information appears in the Other field of Additional Details tab, on the control details page. |
ControlReference | Enter the reference numbers for organization or industry defined content. To enter multiple reference numbers, include the reference numbers in a comma-separated list. |
ControlSubType | The specific characteristic that fall under the control type. The possible values are subcontrolSet, singleSubcontrol, and eGRC. By default, the value is 'subcontrolSet.'
|
*ControlTitle | Enter the title for the control. |
ControlType | The characteristic of the subcontrol that differs from a group of other controls. By default, the value is 'ControlPolicy.' The different types that can be specified are: Predefined Subcontrols, Predefined Single Subcontrol, and Flexible Tests and Documentation. |
SubcontrolCheckType | Enter KRI if the controls to be imported are KRIs. |
SubcontrolDescription | Any additional information that helps understand the purpose of creating a subcontrol. |
SubcontrolDescriptor | Enter the identifier of the subcontrol. |
SubcontrolFixText | Enter the remediation steps for the subcontrol. |
SubcontrolFixType | Add the custom field 'Remediation Type' to view the type specified here. |
SubcontrolMandatory | Enter '1' to import as key control. |
SubcontrolPrimaryFlag | Enter '1' to import as key subcontrol. |
SubcontrolQuestion | Enter the question for the subcontrol. |
SubcontrolQuestionChoices | Enter the answer choices for the question. |
SubcontrolQuestionHelp | Enter any information that will help the questionnaire responders to answer a question. |
SubcontrolQuestionProcedure | Enter the assessment procedure for the question. |
SubcontrolQuestionType | Specify the type to allow the stakeholders to input their answers. The type of questions that you can author are: Check Boxes, Text Box, Radio buttons, Table, and Time Series. |
SubcontrolReference | Enter the reference numbers for organization or industry defined content. |
SubcontrolTagCategory | Enter the name of the category using which you will group common subcontrols. |
SubcontrolTagName | Enter the label to be assigned for the subcontrol. |
*SubcontrolTitle | Enter the title for the subcontrol. |
SubcontrolWeight | Enter a value between 0 and 1 to indicate the weight assigned to a control. When compliance and risk scores are rolled up, the values are calculated based on the percentage of a control's weight which contributes to the total weight of controls at the same level in a hierarchy. |
KRAlpha | Specify the alpha value for the KRI. |
KRBeta | Specify the beta value for the KRI. |
KRCompositionMethod | Specify the method, such as Multiplication and Maximization. |
KRICollectionFrequency | Specify the collection frequency, such as daily, weekly, and monthly for the KRI. |
KRIMeasurementRules | Specify the measurement rules for the KRI. |
KRINature | Specify the KRI nature. |
KRIThresholdH0 | Specify the threshold value for normal to medium risk (H0). |
KRIThresholdH1 | Specify the threshold value for medium to high risk (H1). |
KRIType | Specify the KRI type. |
KRIUnitOfMeasurement | Specify the unit of measurement, such as count, seconds, yen, dollars, and more. |
KRIValueFormat | Specify the KRI format. |
ControlWeight | Enter a value between 0 and 1 to indicate the weight assigned to a control. When compliance and risk scores are rolled up, values are calculated based on the percentage of a control's weight which contributes to the total weight of controls at the same level in a hierarchy. |
Tags | Enter the label to be assigned for the control. |