About mapping the external system data in Control Compliance Suite
Control Compliance Suite
When you integrate an external system, you must map the external data fields either to an existing CCS schema or to a custom schema. The association of the data fields ensures the following:
- Control Compliance Suiteunderstands the data that is imported from an external system.
- Control Compliance Suiteis able to represent the data by using the dashboards and reports.
Hence, before you import external system data, you must identify the data fields that you want to include in the data import. To be able to represent data by using the CCS infrastructure, you must map the external data fields to the Asset-Assessment-Status attributes of CCS.
You can map the external system data fields to an existing CCS schema or create a new schema and then map the fields accordingly. When you map external data fields to an existing CCS schema, you can extend the CCS schema to map the data fields.
Classification and description of the Asset-Assessment-Status attributes in CCS data contains the classification and description of the Asset-Assessment-Status attributes in the CCS data.
Data attribute | Description |
|---|---|
Asset | An asset can be any target object
against which an evaluation can be executed.
For example, assets, asset groups, folders, or
any entity can be classified as assets. |
Assessment | An assessment is the parameter that
you use to assess your subject. For example,
CCS standards or checks, policies, mandates,
and third-party controls can be classified as assessments. |
Status | A status is the outcome or the resultant value of an evaluation. Once you identify the Asset and the Assessment attributes, all the remaining attributes are considered as the status of the assessment. For example, a particular range of DLP incident IDs can be mapped to the 'Pass' status in CCS. Or, a particular value for password length can be mapped to the 'Fail' status in CCS. For CCS to understand the result, the evaluation outcome must be mapped to one of the following:
|
In case of external data fields that are not mapped to an existing CCS schema, you can extend the CCS schema to match and import the unmapped fields.
You can map the external data fields to an existing CCS schema or a custom schema when you add a data system. You can map the CCS result statuses to the statuses in the external data when you correlate asset data.