Control Import Template

The table below lists the attributes available for importing controls:

AttributeDescription
ControlDescriptionAny additional information that helps understand the purpose of creating a control.
ControlDescriptorEnter the identifier of a control.
ControlGuidanceProvide detail information for the efficient use of a control.
ControlOtherInfoEnter other details of a control. This information appears in the Other field of Additional Details tab, on the control details page.
ControlReferenceEnter the reference numbers for organization or industry defined content. To enter multiple reference numbers, include the reference numbers in a comma-separated list.
ControlSubType

The specific characteristic that fall under the control type. The possible values are subcontrolSet, singleSubcontrol, and eGRC. By default, the value is 'subcontrolSet.'

  • Set 'subcontrolSet' if you want to import the 'Predefined Subcontrols' control type.
  • Set 'singleSubcontrol' if you want to import the 'Predefined Single Subcontrol' control type.
  • Set 'eGRC' if you want to import the 'Flexible Tests and Documentation' control type.
*ControlTitleEnter the title for the control.
ControlTypeThe characteristic of the subcontrol that differs from a group of other controls. By default, the value is 'ControlPolicy.' The different types that can be specified are:
Predefined Subcontrols, Predefined Single Subcontrol, and Flexible Tests and Documentation.
SubcontrolCheckTypeEnter KRI if the controls to be imported are KRIs.
SubcontrolDescriptionAny additional information that helps understand the purpose of creating a subcontrol.
SubcontrolDescriptorEnter the identifier of the subcontrol.
SubcontrolFixTextEnter the remediation steps for the subcontrol.
SubcontrolFixTypeAdd the custom field 'Remediation Type' to view the type specified here.
SubcontrolMandatoryEnter '1' to import as key control.
SubcontrolPrimaryFlagEnter '1' to import as key subcontrol.
SubcontrolQuestionEnter the question for the subcontrol.
SubcontrolQuestionChoicesEnter the answer choices for the question.
SubcontrolQuestionHelpEnter any information that will help the questionnaire responders to answer a question.
SubcontrolQuestionProcedureEnter the assessment procedure for the question.
SubcontrolQuestionTypeSpecify the type to allow the stakeholders to input their answers. The type of questions that you can author are:
Check Boxes, Text Box, Radio buttons, Table, and Time Series.
SubcontrolReferenceEnter the reference numbers for organization or industry defined content.
SubcontrolTagCategoryEnter the name of the category using which you will group common subcontrols.
SubcontrolTagNameEnter the label to be assigned for the subcontrol.
*SubcontrolTitleEnter the title for the subcontrol.
SubcontrolWeightEnter a value between 0 and 1 to indicate the weight assigned to a control. When compliance and risk scores are rolled up, the values are calculated based on the percentage of a control's weight which contributes to the total weight of controls at the same level in a hierarchy.
KRAlphaSpecify the alpha value for the KRI.
KRBetaSpecify the beta value for the KRI.
KRCompositionMethodSpecify the method, such as Multiplication and Maximization.
KRICollectionFrequencySpecify the collection frequency, such as daily, weekly, and monthly for the KRI.
KRIMeasurementRulesSpecify the measurement rules for the KRI.
KRINatureSpecify the KRI nature.
KRIThresholdH0Specify the threshold value for normal to medium risk (H0).
KRIThresholdH1Specify the threshold value for medium to high risk (H1).
KRITypeSpecify the KRI type.
KRIUnitOfMeasurementSpecify the unit of measurement, such as count, seconds, yen, dollars, and more.
KRIValueFormatSpecify the KRI format.
ControlWeightEnter a value between 0 and 1 to indicate the weight assigned to a control. When compliance and risk scores are rolled up,
values are calculated based on the percentage of a control's weight which contributes to the total weight of controls at the same level in a hierarchy.
TagsEnter the label to be assigned for the control.