menu

Why Map an Authority Document?

Compliance Mapping is the process of comparing one Citation’s Mandates to another Citation’s Mandates. An older methodology is matching Citation to Citation in a matrix, with the newer methodology being matching each Citation to a Common Control in a star pattern; this is the process the UCF Team uses. The process of Compliance Mapping consists of:

  • Cataloging the Authority Document in question
  • Extracting its pertinent Citations and Mandate
  • Tagging the terms in those Mandates
  • Selecting each tagged term’s in-context definition
  • Mapping that tagged Mandate to a Common Control

Compliance Mapping, done right, is a scientific and rigorous process. That’s the bad news. The good news is that the Unified Compliance Framework® has a slew of patents on how to do this and provides the tools and training necessary to support your organization’s efforts in compliance mapping.

Why would you want to undertake Compliance Mapping?

We’ve identified several different ways that our customers and partners want to provide mapping services, and have defined different roles to fit their needs.

Individual Mapping Contributors

These contributors will act as part of the UCF mapping team and be paid directly by Unified Compliance.

 

This is the easiest way to get started mapping—and you get paid while doing it! The UCF Team always need good staff assisting in the mapping process. We have the structures in place to pay you for the work you do upon completion of each project. If you want to contribute mapped content into the UCF, if you want to get your feet wet working on mapping, this is the best way to start.

Self-Service Customers

Self-Service Customers are companies that become certified to map certain publicly available documents such as laws and regulations for their own compliance requirements.

 

There are several reasons why you might want to map content into the UCF for your own use.

First and foremost, you can map your own internal, organizational governance documents into your own Common Controls Hub™ account. Once you’ve mapped them in, you can use the mapping to compare your internal mandates with any matching Common Control (though you can’t create new Common Controls). Organizations use this information to determine the gaps and overlaps between what they’ve written and what they must comply with.

Another reason to map content into the UCF is that your organization might need specific, publicly accessible documents that other organizations might not care about. In that case, you can map an Authority Document into the UCF and either sell that mapping later or provide it free to a colleague who might want it.

Mapping Consultants and Professional Services groups

Consulting organizations that meet the requirements to be a partner will provide mapping services to their clients for a fee.

 

As a consulting partner of the UCF, you can leverage the UCF Mapper software and processes and ensure your clients that you are certified as a Compliance Mapper by (ISC)2. How you work out payment for your services is between you and your clients. You control the access to the Authority Documents you map; you decide which accounts in the Common Controls Hub have access to the documents your organization has mapped.

Mapping Providers

Mapping providers are organizations that provide mapped documents to anyone who wants them for a fee.

 

The Common Controls Hub has clients from all over the world. It is the largest repository of Authority Documents that has ever existed, which makes it a great marketplace for people who want to provide compliance mapping for Authority Documents others want to consume. Whereas the consulting model is a one-to-one relationship, Mapping Providers map an Authority Document and then determine a set amount anyone who wants to put it in their library will pay. You do the mapping, you decide the access price, and when people check out the document, we send you the royalties.

Mapping Patrons

Mapping Patrons are organizations that share free documents to a limited or unlimited audience.

 

Most of the organizations that we work with that fit into this category are the originators of the Authority Documents they are mapping. How do the compliance mandates in your Authority Document align with compliance mandates in other Authority Documents? The best and quickest way to find out is to map in your own Mandates and the UCF will tell you automatically which terms and which mandates either stand out as being rarely used and which are the most common.

Any group of organizations that need to share a common set of information with each other are prime candidates to become Mapping Patrons for members of their group. Do you have a group of like-minded organizations that need to compare various Authority Documents not already in the UCF? Become a Mapping Patron for your group!