Mapping of control statements

You can map control statements to mandates, policies, checks, questions, question groups.

You must always map the control statements to a section in the mandate and not to root of the mandate. You can use the Mandates view to map individual control statements to a single mandate. Alternatively, you can also use the Controls Framework view to map a single control statement to one or more mandates.

To map individual control statements to a single mandate

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Mandates.

  2. Click the mandate section that you want to map control statements to.

  3. Click Statement Mappings.

  4. Click Mapped Statements in the Mapped Statements table.

  5. Locate the statements that you want to map to the section in the Available Statements table and do one of the following:

    • Click the statement, then click the up arrow icon to map it to the section.

    • Click the statement and drag it to the Mapped Statements column of the Mapped Statements table .

  6. Click Save.

To remove a mapped control statement from a mandate

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Mandates.

  2. Click the mandate section that you want to remove the mapped control statements from.

  3. Click Statement Mappings.

  4. Locate the statement that you want to remove from the mandate section in the Mapped Statements column of the Mapped Statements table and do one of the following:

    • Click the statement, then click the down arrow icon to remove the mapping to the mandate section.

    • Click the statement and drag the statement to the Available Statements table.

  5. Click Save.

To map a single control statement to one or more mandates

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.

  2. Click the control statement that you want to map to one or more mandates.

  3. Click Mandate Mappings.

  4. Click All Mandates to display the list of mandates in the Controls Studio.

  5. Select a mandate section the control statement should be mapped to, and do one of the following:

    • Click the add icon with the yellow plus (+) symbol.

    • Click the mandate and drag the mandate to the Mapped Sections area.

    The added mandate sections are shown grouped by mandate in the Mapped Sections area.

To remove one or more mandates from a single control statement

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Control Statements.

  2. Click the control statement that you want to remove one or more mandates from.

  3. Click Mandate Mappings.

  4. Click All Mandates to display the list of mandates in the Controls Studio.

  5. Select a mandate to remove, and do one of the following:

    • Click the remove icon with the red X symbol.

    • Drag the mandate from the Mapped Sections area to the All Mandates area.

By mapping policies to control statements, you connect the mandates that you must comply with to the policies that validate compliance.

You can use the Policies view to map one or more control statements to a single policy. You can also use the Control Statements view to map a single control statement to one or more policies.

To map one or more control statements to a policy

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Policies.

  2. Click the policy that you want to map control statements to.

  3. Locate the statement that you want to map to the policy in the Available Statements table and do one of the following:

    • Click the statement, then click the up arrow icon to map it to the policy.

    • Click the statement and drag it to the Mapped Statements table.

  4. Click Save.

To remove a mapped control statement from a policy

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Policies.

  2. Click the policies that you want to remove the mapped control statements from.

  3. Locate the statement that you want to remove from the policy in the Mapped Statements table and do one of the following:

    • Click the statement, then click the down arrow icon to remove the mapping to the policy.

    • Click the statement and drag the statement to the Available Statements table.

  4. Click Save.

To map one or more policies to a single control statement

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.

  2. Click the control statement that you want to map one or more policies to.

  3. Click Policy Mappings.

  4. Click All Policies to display the list of policies.

  5. Select a policy that should be mapped to the control statement, and do one of the following:

    • Click the add icon with the yellow plus (+) symbol.

    • Drag the policy to the Mapped Policies area.

To remove one or more policies from a single control statement

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.

  2. Click the control statement that you want to remove one or more policies from.

  3. Click Policy Mappings.

  4. In the Mapped area, select a policy to remove, and do one of the following:

    • Click the remove icon with the red X symbol.

    • Drag the policy from the Mapped area to the All Policies area.

By mapping checks to control statements, you connect the mandates that you must comply with to the checks that validate compliance.

You can use the Standards view to map one or more control statements to a single check. You can also use the Controls Framework view to map a single control statement to one or more checks.

If a standard contains one or more copied checks, you can clone the control statements that are mapped to the checks.

To map a single control statement to one or more checks

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.

  2. Click the control statement that you want to map one or more checks to.

  3. Click Check Mappings.

  4. Click All Checks to display the list of checks. Checks are grouped by standard in the All Checks area.

  5. Expand the standard and the section to select a check that should be mapped to the control statement, and do one of the following:

    • Click the add icon with the yellow plus (+) symbol.

    • Drag the check to the Mapped Checks area.

    The added checks are shown grouped by standard in the Mapped Checks area.

To remove one or more checks from a single control statement

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.

  2. Click the control statement that you want to remove one or more checks from.

  3. Click Check Mappings.

  4. Click All Checks to display the list of checks that in groups by standard in the Controls Studio.

  5. Select a check to remove, and do one of the following:

    • Click the remove icon with the red X symbol.

    • Drag the check from the Mapped Checks area to the All Checks area.

To map a single check to one or more control statements

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Standard Manager Evidence.

  2. Expand the standard and the section to select the check that you want to map one or more control statements to.

  3. Select a statement that should be mapped to the check, and do one of the following:

    • Click the statement, then click the up arrow icon to map it to the check.

    • Drag the statement to the Mapped Statements area.

To unmap one or more control statements from a single check

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Standard Manager Evidence.

  2. Expand the standard and the section to select the check that you want to remove one or more control statements from.

  3. Select a statement to remove, and do one of the following:

    • Click the statement, then click the down arrow icon to unmap it from the check.

    • Drag the statement from the Mapped Statements area to the Available Statements area.

To clone the control statements that are mapped to a copied check

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Expand the standard and the section to select.

  2. Right-click the group, standard, or section that includes copied checks.

  3. Click Clone Mappings.

  4. In the dialog box, click Ok.

By mapping a Response Assessment question to a control statement, you take advantage of the built-in Response Assessment ability to track policy acceptance.

You can use the Questions view to map one or more control statements to a single question or a question group. You can also use the Controls Framework view to map a single control statement to one or more questions or question group.

Before you map questions to control statements, you must connect the Controls Studio to the CCS Assessment Manager Server.

Note:

You cannot map control statements to the root folder. The control statements can only be mapped to the parent folder (question group) and the questions inside that folder.

To connect the Controls Studio to the CCS Assessment Manager Server

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Assessment Manager Evidence.

  2. Right-click the Assessment Manager Evidence area on the left of the Controls Studio dialog, then click Connect.

  3. In the Select a CCS Assessment Manager Server dialog, enter the name or IP address of the CCS Assessment Manager Server in the Server field. You can also select the server name from the drop-down list.

  4. Enter the port to connect to the server in the Port. The default port is 1977.

  5. Click OK to connect to the server.

To map a question group to a single control statement

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.

  2. Click the control statement that you want to map to the question group.

  3. Click Question Mappings.

  4. Click All Questions to display the list of Questions in the Controls Studio.

  5. Select the question group that should be mapped to the control statement, and do one of the following:

    • Click the add icon with the yellow plus (+) symbol.

    • Drag the question to the Mapped Questions area.

To map one or more questions to a single control statement

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.

  2. Click the control statement that you want to map one or more questions to.

  3. Click Question Mappings.

  4. Click All Questions to display the list of questions in the Controls Studio.

  5. Select a question that should be mapped to the control statement, and do one of the following:

    • Click the add icon with the yellow plus (+) symbol.

    • Drag the question to the Mapped Questions area.

To remove one of more questions from single control statement

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.

  2. Click the control statement that you want to remove one or more questions from.

  3. Click Question Mappings.

  4. Click All Questions to display the list of questions in the Controls Studio.

  5. Select a question to remove, and do one of the following:

    • Click the remove icon with the red X symbol.

    • Drag the question from the Mapped Questions area to the All Questions area.

To map a single question to one or more control statements

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Assessment Manager Evidence.

  2. Click the question that you want to map one or more control statements to.

  3. Select a control statement that should be mapped to the question, and do one of the following:

    • Click the statement, then click the up arrow icon to map it to the question.

    • Drag the statement to the Mapped Statements area.

To unmap one or more control statements from a single question

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Assessment Manager Evidence.

  2. Click the question that you want to remove one or more control statements from.

  3. Select a statement to remove, and do one of the following:

    • Click the statement, then click the down arrow icon to unmap it from the question.

    • Drag the statement from the Mapped Statements area to the Available Statements area.

You can use the Symantec Controls Studio to map control statements to evidence from external data system. These sources include the following:

  • Symantec Data Loss Prevention Incidents

  • Symantec Vulnerability Assessment

  • Symantec Response Assessment

  • Custom created external data system

You can use the External Evidence view to map one or more control statements to a single assessment or assessment procedure. You can also use the Controls Framework view to map a single control statement to one or more assessments or assessment procedures.

To map one or more control statements to a single external evidence

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click External Evidence.

  2. In the External Evidence area, expand the desired external evidence and then select the assessment or the assessment procedure that you want to map one or more control statements to. Select Statement Mappings in the right pane.

  3. In the Available Statements area, select a statement that should be mapped to the assessment or the assessment procedure, and do one of the following:

    • Click the statement, then click the up arrow icon to map it to the check.

    • Drag the statement to the Mapped Statements area.

To unmap one or more control statements from a single assessment

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click External Evidence.

  2. In the External Evidence area, select the assessment or the assessment procedure that you want to remove one or more control statements from.

  3. In the Available Statements area, select a statement to remove, and do one of the following:

    • Click the statement, then click the down arrow icon to unmap it from the check.

    • Drag the statement from the Mapped Statements area to the Available Statements area.

To map one or more external evidences to a single control statement

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.

  2. Click the control statement that you want to map one or more assessments or assessment procedures to.

  3. Click External Data Assessment mappings.

  4. Click External Data Assessments to display the list of assessment or assessment procedure.

  5. Select an assessment or an assessment procedure that should be mapped to the control statement, and click the add icon with the yellow plus (+) symbol.

    You can also use the Suggested External Data Assessments for mapping purpose. The Suggested External Data Assessments are a subset of All External Data Assessments.

    Suggested External Data Assessments are the relevant assessments or assessment procedures suggested by Symantec.

To remove one or more assessments from a single control statement

  1. In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.

  2. Click the control statement that you want to remove one or more assessments or assessment procedures from.

  3. Click External Data Assessment mappings.

  4. In the Mapped area, select an assessment or an assessment procedure to remove, and click the remove icon with the red X symbol.

Imported Document ID: HOWTO107220
Legacy ID: v80119894_v105506697

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Symantec Corporation