Symantec IT Risk and Compliance Product Group

Expand all | Collapse all

Issue exporting Standards

  • 1.  Issue exporting Standards

    Broadcom Employee
    Posted 12-23-2011 02:36 PM

    Control Compliance Suite 10.0

    Issue:    Exporting compliance standards

    Purpose:     Need to export specific standards so I can remove duplicate checks so that when we run reports for technicians duplicates do not show up.

    For instance:    check "2.2.4.1.2 -  Application Log Guest Access Restricted" appears under sections A.1.2/2.2.3/12.5.5/10.5.2

    When we run reports against the checks we get duplicates listed in the reports.

     

    On version 9.0, I was able to properly export any standard and import the standard to Excel or Access to modify.  With 10.0, I get the following error when attempting to import a standard:

     

    There is a problem with the specified XML or schema source.The system cannot locate the object specified. It is making reference to "standards.xsd".

     

    I was able to determine that the xml files are making reference to "standards.xsd":

    <standard.xsi:noNamespaceSchemaLocation="Standards.xsd"

    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

     

    Any ideas as to why I cannot import the xml??



  • 2.  RE: Issue exporting Standards

    Broadcom Employee
    Posted 12-27-2011 04:04 PM

    What is your reason for wanting to manually change the xml file? The changes you are making would be very simple to do within the console itself. Simply make a copy of the standard and then delete the checks you do not want. I rarely ever advise working with the xml files unless there is a very specific reason to do so.



  • 3.  RE: Issue exporting Standards

    Broadcom Employee
    Posted 12-29-2011 01:56 PM

    If you need to remove duplicate standards why not run it against an asset then see the results

     

    then you could search by number or copy / paste to find the duplicates. As you scroll through a report you would see the same numbered items which would indicate a duplicate check. Then you could remove that from the standard.

     

    I've done this a few times and it does not take very long. I can have the ccs_web site open as well as the webconsole.