UCF Mapper FAQs

  1. Where do I get training to be a UCF Mapper and much does it cost?  (ISC)2 will provide the training at a cost of $2700 per individual.
  2. How many people are on a UCF Mapper team?  Each Authority Document mapped will require 3 people: a mapper, a reviewer and an approver.
  3. How much does UCF Mapper cost? UCF Mapper is an add-on to the CCH subscription and costs $5000. The mapper, the reviewer and the approver can be connected to a single account, and all 3 must have a Common Controls Hub login for that account.
  4. At some point, mapped documents will have several levels of access control: available to all; only available to the mapper’s organization; only available to clients of the mapper’s organization 
  5. After new mapped documents are added to the UCF, where will I see them and select them? The mapped documents will be visible in the Common Controls Hub and can be selected (or not) in the Workspace and added to Authority Document lists.
  6. Can I add new Common Controls to the UCF? Unless the Authority Document is destined to be generally available via the Unified Compliance Framework and the Common Controls Hub, mappers will not be able to add new controls to the UCF as new controls require legal review.
  7. Can I add new Compliance Dictionary entries? Unless the Authority Document is destined to be generally available, no new dictionary entries will be permitted.
  8. How long does it take to be certified as a UCF Mapper? The training program is estimated to take between 8-10 hours.
  9. After I add new ADs when will they show up in the CCH? Newly mapped documents will be available the next day in the Common Controls Hub.
  10. Can I get CPE credits to learn how to be a UCF Mapper Certified Mapper? CPE credits will be offered. The number of credits will match the hours required to complete the course.
  11. What do I need to bring your data content into the GRC application I am using? You will need a CCH Basic subscription ($4,995) and API Access ($5,000). One API license opens up all API-enabled apps. For example, if you have Sandbox, DEV, TEST, and PROD, that cost allows access from all 4 instances.