You can import and export IT GRC information (including programs, control objectives, and control activities) to and from the Process Pack for IT GRC using the Process Pack for IT GRC Excel Client add-in. The following table lists the usage scenarios for the Excel Client add-in.
|
Scenario |
Description |
|
Perform bulk updates to IT GRC information |
Allows you to make bulk updates to IT GRC information. For example, assigning an owner to multiple control objectives. |
|
Create new IT GRC information |
Allows you to create new IT GRC information interactively or from other sources, such as Microsoft Excel® spreadsheets. This allows you import IT GRC information from other systems or sources of IT GRC information. |
Performing Updates to Existing IT GRC Management Information
You can make updates to existing IT GRC management information using the Process Pack for IT GRC Excel Client add-in. You can make updates to individual items or you can perform bulk updates to any number of items in the IT GRC management information, including programs, control objectives, and control activities. After you make the modifications in Excel, the Excel Client add-in automatically updates the information in the System Center Service Manager CMDB.
Creating New IT GRC Management Information
You can create new IT GRC management information using the Process Pack for IT GRC Client add-in. You can create individual items or you can create any number of IT GRC management information items, including programs, control objectives, and control activities.
Create new IT GRC management control objective using the information in the following table.
|
Information needed |
Value |
|
Program |
Credit Card Processing Compliance Program |
|
<IT_GRC_item_type> |
Control Activities |
|
<control_activity_title> |
Post IT GRC policy information on bulletin boards in all cafeterias and kitchens. |
|
<control_activity_description> |
Necessary to post IT GRC policy information on bulletin boards in public gathering places so that employees are informed of the changes. |
|
<control_activity_procedure type> |
Manual |
|
<control_activity_type> |
Policy(PCA) |
|
Owner |
User account to be configured as the owner of the control activity |
|
<assigned_to> |
User account to be configured as the assigned to of the control activity |