Create ISO 27701 referential

[danje57]

Dear all,

I've created the referential for ISO 27701, Privacy Information Management System.

However now, how to import it, and map it to ISO 27002:2013 and 2022 controls in Monarc?
ISO27701 Monarc.xlsx

Regards,

[jerolomb]

Dear Danje57,

For that your Excel file has to be in the "MONARC" format. First have a 27701 in excel with column, code, label and category.

After that go to the Knowledge Base, create the referential 27701. And after under the referential, click on the blue plus and import the Excel file.

Once it's done, you have the referential. To link with other referential it's also to import an excel file for the mapping, you will find in the doc [1] the place in MONARC

Once you are on the right view you can download an example file. Fill it and upload it. Then the mapping is done.

if you have any issue, don't hesitate

Jérôme
[1] https://www.monarc.lu/documentation/user-guide/#referentials point 2

[danje57]

Thanks, this is the file now
1.xlsx

It can be imported into Monarc Training instance, but not in my SaaS environment :-/

Strange

[danje57]

On the SaaS, Monarc display this; but I can't continue the import of the file

[jerolomb]

Seems it's an issue with ISO 27001:2013, you can start by importing first your referential and after via MOSP the iso 27002.

We will investigate

[danje57]

HEllo,

Finally I take time to finish the ISO 27701 Referential with match with new ISO 27002:2022 controls.

I would like to share it with you.

However, when I export my ISO27701 referential, it seems that the match is not saved in the exported CSV...

[danje57]

After search,
I can't find how to export ISO27701 referential with match to ISO 27002:2022.

I wish to share this with the community, however excepted in the GUI, I don't see the match in the exported file...

[jerolomb]

Hello danje57

One you have done the matching. You can click here :

Let us know if it doesn't work

Have a nice day,

Jérôme

[danje57]

@cedricbonhomme and @jfrocha as promised, I created ISO 27017 for cloud management with match with 27002:2022 controls.

Feel free to share it ;-)

allControls_ISO 27017.csv
matchReferentials.csv

[cedricbonhomme]

thanks again for this. It's very nice. I'll add it !

[cedricbonhomme]

For the moment the object is already here:
https://objects.monarc.lu/object/view/5233

thanks again !

I've used PyMOSP to push it. Just for your information. The comple code with the creation of the JSON:

#! /usr/bin/env python
# -*- coding: utf-8 -

import csv

import pymosp
from config import CONFIG

CSV_FILE = 'allControls_ISO.27017.csv'
VALIDATING_SCHEMA = 12
OWNING_ORGANIZATION = 16

if __name__ == '__main__':
    # Construction of the object
    new_object = {
        "name": "ISO 27017",
        "description": "ISO 27017 for Cloud Management",
        "licenses": [{"license_id": "CC0-1.0"}],
        "schema_id": VALIDATING_SCHEMA,
        "org_id": OWNING_ORGANIZATION,
    }
    objects = {
        "uuid": "9a73a15e-bb36-434e-a2fe-c3ac1b7ed9a2",
        "label": "ISO 27017",
        "language": "EN",
        "authors": [
            "<Author-Name>"
        ],
        "refs": "https://www.iso.org/fr/standard/43757.html",
        "version": 1,
        "values": []
    }
    with open(CSV_FILE, newline='') as csvfile:
        reader = csv.reader(csvfile, delimiter=';')
        for row in reader:
            objects["values"].append({
                "uuid": row[0],
                "label": row[2],
                "category": row[3],
                "referential": "9a73a15e-bb36-434e-a2fe-c3ac1b7ed9a2",
                "referential_label": "ISO 27017",
                "code": row[1],
            })
    new_object["json_object"] = objects

    # Create the new object on MOSP
    token = CONFIG["TOKEN"]
    mosp = pymosp.PyMOSP("https://objects.monarc.lu/api/v2/", token)
    r = mosp.add_objects([new_object])

[danje57]

Thanks Cedric!

I'll probably make the PCI-DSS v4 in the future
But not now maybe on December.

I keep a track of the script for for sharing!

[cedricbonhomme]

OK, thank you. Do not worry for the push, we can help.

[danje57]

Thanks Jerome,

Cleaning my browser cache solve the issue and the arrow appears.

Now I'll see how to share the files with you.

Next week if I've time, I'll do the same for ISO 27017.