Symantec IT Risk and Compliance Product Group

Control Compliance Suite 10.0

Issue:    Exporting compliance standards

Purpose:     Need to export specific standards so I can remove duplicate checks so that when we run reports for technicians duplicates do not show up.

For instance:    check "2.2.4.1.2 -  Application Log Guest Access Restricted" appears under sections A.1.2/2.2.3/12.5.5/10.5.2

When we run reports against the checks we get duplicates listed in the reports.

On version 9.0, I was able to properly export any standard and import the standard to Excel or Access to modify.  With 10.0, I get the following error when attempting to import a standard:

There is a problem with the specified XML or schema source.The system cannot locate the object specified. It is making reference to "standards.xsd".

I was able to determine that the xml files are making reference to "standards.xsd":

<standard.xsi:noNamespaceSchemaLocation="Standards.xsd"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

Any ideas as to why I cannot import the xml??

What is your reason for wanting to manually change the xml file? The changes you are making would be very simple to do within the console itself. Simply make a copy of the standard and then delete the checks you do not want. I rarely ever advise working with the xml files unless there is a very specific reason to do so.

If you need to remove duplicate standards why not run it against an asset then see the results

then you could search by number or copy / paste to find the duplicates. As you scroll through a report you would see the same numbered items which would indicate a duplicate check. Then you could remove that from the standard.

I've done this a few times and it does not take very long. I can have the ccs_web site open as well as the webconsole.