You can map control statements to mandates, policies, checks, questions, question groups.
You must always map the control statements to a section in the mandate and not to root of the mandate. You can use the Mandates view to map individual control statements to a single mandate. Alternatively, you can also use the Controls Framework view to map a single control statement to one or more mandates.
To map individual control statements to a single mandate
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Mandates.
Click the mandate section that you want to map control statements to.
Click Statement Mappings.
Click Mapped Statements in the Mapped Statements table.
Locate the statements that you want to map to the section in the Available Statements table and do one of the following:
Click Save.
To remove a mapped control statement from a mandate
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Mandates.
Click the mandate section that you want to remove the mapped control statements from.
Click Statement Mappings.
Locate the statement that you want to remove from the mandate section in the Mapped Statements column of the Mapped Statements table and do one of the following:
Click Save.
To map a single control statement to one or more mandates
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.
Click the control statement that you want to map to one or more mandates.
Click Mandate Mappings.
Click All Mandates to display the list of mandates in the Controls Studio.
Select a mandate section the control statement should be mapped to, and do one of the following:
Click the add icon with the yellow plus (+) symbol.
Click the mandate and drag the mandate to the Mapped Sections area.
The added mandate sections are shown grouped by mandate in the Mapped Sections area.
To remove one or more mandates from a single control statement
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Control Statements.
Click the control statement that you want to remove one or more mandates from.
Click Mandate Mappings.
Click All Mandates to display the list of mandates in the Controls Studio.
Select a mandate to remove, and do one of the following:
By mapping policies to control statements, you connect the mandates that you must comply with to the policies that validate compliance.
You can use the Policies view to map one or more control statements to a single policy. You can also use the Control Statements view to map a single control statement to one or more policies.
To map one or more control statements to a policy
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Policies.
Click the policy that you want to map control statements to.
Locate the statement that you want to map to the policy in the Available Statements table and do one of the following:
Click Save.
To remove a mapped control statement from a policy
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Policies.
Click the policies that you want to remove the mapped control statements from.
Locate the statement that you want to remove from the policy in the Mapped Statements table and do one of the following:
Click Save.
To map one or more policies to a single control statement
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.
Click the control statement that you want to map one or more policies to.
Click Policy Mappings.
Click All Policies to display the list of policies.
Select a policy that should be mapped to the control statement, and do one of the following:
To remove one or more policies from a single control statement
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.
Click the control statement that you want to remove one or more policies from.
Click Policy Mappings.
In the Mapped area, select a policy to remove, and do one of the following:
By mapping checks to control statements, you connect the mandates that you must comply with to the checks that validate compliance.
You can use the Standards view to map one or more control statements to a single check. You can also use the Controls Framework view to map a single control statement to one or more checks.
If a standard contains one or more copied checks, you can clone the control statements that are mapped to the checks.
To map a single control statement to one or more checks
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.
Click the control statement that you want to map one or more checks to.
Click Check Mappings.
Click All Checks to display the list of checks. Checks are grouped by standard in the All Checks area.
Expand the standard and the section to select a check that should be mapped to the control statement, and do one of the following:
The added checks are shown grouped by standard in the Mapped Checks area.
To remove one or more checks from a single control statement
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.
Click the control statement that you want to remove one or more checks from.
Click Check Mappings.
Click All Checks to display the list of checks that in groups by standard in the Controls Studio.
Select a check to remove, and do one of the following:
To map a single check to one or more control statements
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Standard Manager Evidence.
Expand the standard and the section to select the check that you want to map one or more control statements to.
Select a statement that should be mapped to the check, and do one of the following:
To unmap one or more control statements from a single check
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Standard Manager Evidence.
Expand the standard and the section to select the check that you want to remove one or more control statements from.
Select a statement to remove, and do one of the following:
To clone the control statements that are mapped to a copied check
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Expand the standard and the section to select.
Right-click the group, standard, or section that includes copied checks.
Click Clone Mappings.
In the dialog box, click Ok.
By mapping a Response Assessment question to a control statement, you take advantage of the built-in Response Assessment ability to track policy acceptance.
You can use the Questions view to map one or more control statements to a single question or a question group. You can also use the Controls Framework view to map a single control statement to one or more questions or question group.
Before you map questions to control statements, you must connect the Controls Studio to the CCS Assessment Manager Server.
Note: |
You cannot map control statements to the root folder. The control statements can only be mapped to the parent folder (question group) and the questions inside that folder. |
To connect the Controls Studio to the CCS Assessment Manager Server
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Assessment Manager Evidence.
Right-click the Assessment Manager Evidence area on the left of the Controls Studio dialog, then click Connect.
In the Select a CCS Assessment Manager Server dialog, enter the name or IP address of the CCS Assessment Manager Server in the Server field. You can also select the server name from the drop-down list.
Enter the port to connect to the server in the Port. The default port is 1977.
Click OK to connect to the server.
To map a question group to a single control statement
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.
Click the control statement that you want to map to the question group.
Click Question Mappings.
Click All Questions to display the list of Questions in the Controls Studio.
Select the question group that should be mapped to the control statement, and do one of the following:
To map one or more questions to a single control statement
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.
Click the control statement that you want to map one or more questions to.
Click Question Mappings.
Click All Questions to display the list of questions in the Controls Studio.
Select a question that should be mapped to the control statement, and do one of the following:
To remove one of more questions from single control statement
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.
Click the control statement that you want to remove one or more questions from.
Click Question Mappings.
Click All Questions to display the list of questions in the Controls Studio.
Select a question to remove, and do one of the following:
To map a single question to one or more control statements
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Assessment Manager Evidence.
Click the question that you want to map one or more control statements to.
Select a control statement that should be mapped to the question, and do one of the following:
To unmap one or more control statements from a single question
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Assessment Manager Evidence.
Click the question that you want to remove one or more control statements from.
Select a statement to remove, and do one of the following:
You can use the Symantec Controls Studio to map control statements to evidence from external data system. These sources include the following:
Symantec Data Loss Prevention Incidents
Symantec Vulnerability Assessment
Symantec Response Assessment
Custom created external data system
You can use the External Evidence view to map one or more control statements to a single assessment or assessment procedure. You can also use the Controls Framework view to map a single control statement to one or more assessments or assessment procedures.
To map one or more control statements to a single external evidence
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click External Evidence.
In the External Evidence area, expand the desired external evidence and then select the assessment or the assessment procedure that you want to map one or more control statements to. Select Statement Mappings in the right pane.
In the Available Statements area, select a statement that should be mapped to the assessment or the assessment procedure, and do one of the following:
To unmap one or more control statements from a single assessment
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click External Evidence.
In the External Evidence area, select the assessment or the assessment procedure that you want to remove one or more control statements from.
In the Available Statements area, select a statement to remove, and do one of the following:
To map one or more external evidences to a single control statement
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.
Click the control statement that you want to map one or more assessments or assessment procedures to.
Click External Data Assessment mappings.
Click External Data Assessments to display the list of assessment or assessment procedure.
Select an assessment or an assessment procedure that should be mapped to the control statement, and click the add icon with the yellow plus (+) symbol.
You can also use the Suggested External Data Assessments for mapping purpose. The Suggested External Data Assessments are a subset of All External Data Assessments.
Suggested External Data Assessments are the relevant assessments or assessment procedures suggested by Symantec.
To remove one or more assessments from a single control statement
In the navigation bar in the lower left corner of the Symantec Controls Studio window, click Controls Framework.
Click the control statement that you want to remove one or more assessments or assessment procedures from.
Click External Data Assessment mappings.
In the Mapped area, select an assessment or an assessment procedure to remove, and click the remove icon with the red X symbol.
Subscribing will provide email updates when this Article is updated. Login is required.
This will clear the history and restart the chat.
Thanks for your feedback. Let us know if you have additional comments below. (requires login)