In CCS, data correlation occurs at two levels - at the asset level and at the status level. You can create the system data correlation by using the Set Asset Reconciliation wizard from Manage > External Data Integration view.
CCS represents imported data in terms of the following three attributes:
A managed object in the system that has value, has an owner, has controlled access, and can have authority. The authority occurs when the asset is a person or a query engine. For example, a Windows or Unix computer, user, an application and so on.
A statement that tests a condition for an asset, such as a test if passwords have a certain length.
A status is the outcome or the resultant value of an assessment. Once you identify the asset and the assessment attributes, all the remaining attributes are considered as the status of the assessment. For example, a particular range of DLP incident IDs can be mapped to the 'Pass' status in CCS. Or, a particular value for password length can be mapped to the 'Fail' status in CCS.
For CCS to understand the result, the evaluation outcome must be mapped to one of the following:
To elaborate on the subject of status correlation, let us assume that you have imported data from an external system. The imported data contains certain values for assessment status. You can specify a particular value or a range of values in the external data and correlate the same to a particular CCS status. For example, you may map the DLP incident data within the range of 0 to 4 to the 'Fail' status in CCS.
For example, if the imported data contains values for a particular data field, you can correlate those values to an existing entity in CCS. For example, you import external data containing assessment reports for the devices which are identified by their IP addresses. By referring to the device IP addresses, you can correlate the device in the external data to an asset in the CCS system. If the asset does not exist in the CCS system, then you can add the asset by using the reconciliation rules.
The following table is an example of the policy compliance without CCS asset correlation.
The columns are grouped based on the field mapping of Asset, Assessment, and Status. From the data schema you can have more than one column mapped to Asset, Assessment and Status. For example, if you have 10 columns in the data schema, one or more columns can map to Asset, Assessment, or Status.
The following table shows the external data field mapping of Asset, Assessment, and Status.