FAQ

Common Questions For Compliance Framework.

What Is An Authority Document?
We map Authority Documents, but what are those, you ask? An Authority Document is simply a document that your organization must comply with. Different Authority Document types we have identified are:

- ·Audit Guideline
- ·Best Practice Guideline
- ·Bill or Act
- ·Contractual Obligation
- ·Organizational Directive
- ·Regulation or Statute
- ·Safe Harbor
- ·Self-Regulatory Body Requirement
- ·Standards, National and International
- ·Vendor Documentation

What Is The Difference In A Starter Account Vs Basic Subscription?

Common Controls Hub Plans	Starter Account	Basic Subscription
Yearly Pricing	FREE	$4,995 for 3 users
Features
Research Hundreds of Authority Documents The CCH covers regulations for Information Technology, Physical Security, Records Management, Privacy, & Third Party Supply Chain. Information includes detailed summaries of all mapped Authority Documents, a link to the originator, the effective date, & controls by type, zone, & classification.
First Access to Authority Documents New Authority Documents added to the CCH will be available ONLY to paid accounts for a period of one year. After one year, those ADs will become available to Starter accounts as well.
Research Thousands of Common Controls A Common Control is a shared compliance requirement connected to the original mandates an organization must follow. Each control includes a reference link (Control ID), so you can research specific requirements & drill down for explanations & sources.
Compare Authority Documents Find the gaps & overlaps between regulations to eliminate redundant controls, reduce requirements to the bare minimum needed to comply, & drastically decrease audit requirements.	5	Unlimited
Export Authority Document comparisons Exports contain a detailed list comparison of mandated & implied Common Controls, citations, & basic Authority Document information.		Unlimited
Authority Document Summary Reports Each report provides an overview of the Authority Document, a chart of the types of controls (behavioral, process, configuration, etc.), a chart depicting how the controls are mapped within the UCF, a complete list of the authority document’s citations, citation guidance for the specified controls, and any glossary terms or acronyms referenced in the UCF.		Unlimited
Build Custom Spreadsheets The Common Controls Hub lets you customize controls spreadsheets to reflect only the controls that directly affect your organization.
Create & Export Builds A build is an on-demand export of either spreadsheets, or spreadsheets and Word documents based on the Common Controls from the Authority Document list you created.		5
Add Ons
Add More Users Account Admins may add as many users as needed.	FREE	$99/ea
Add More Builds Generate builds based on the Authority Documents you’ve selected & download customized spreadsheets and/or Word document templates.		$99/ea
Custom Compliance Templates Get hundreds of compliance templates customized for your organization based on the Authority Documents you select. Templates include policies, standards, roles, event monitoring, & more.		$5,000
Attestation Portal Responses After an organization has distributed an Authority Document list to a Third Party Supply Chain vendor, receivers respond online with compliance status.	$99/ea	FREE
API Access (connect UCF data to third party apps) Allows you to connect other software to the UCF via your Common Controls Hub account.		$5,000/yr
OEM API Access (developer access to UCF) Allows OEM and third-party developer access to the UCF via your software with our API & license key.		$15,000/yr
Other Products
ComplianceDictionary.com	10 Searches/per day	Unlimited
UCF Mapper A new mapping tool which enables us to map more documents in less time and enables our customers to map their own Authority Documents and policies into the UCF.		$5,000/yr
Research Allows you to search and view the relationships between the UCF’s Common Controls, Authority Documents, Citations, Dictionary Terms, & Assets. Requires a Basic Subscription.
	Sign Up	Sign Up

What Is The Unified Compliance Framework And How Does It Relate To The Common Controls Hub?
The Unified Compliance Framework® (UCF®) is the world’s largest library database of interconnected compliance documents and the world’s only commercially available Common Controls framework. The Unified Compliance Framework contains:

·1,000 mapped Authority Documents
·100,000+ individual mandates
·10,000+ Common Controls
·250,000 interconnected words and phrases in dictionary

The Common Controls Hub® (CCH®) is the dynamic Software-as-a-Service portal built on the Unified Compliance Framework to make it easy to extract the data you need. Authority Documents are mapped into the UCF and the data is viewed and extracted through the CCH.

What Regulations Do You Map?
We help you keep pace with regulatory demands. Unified Compliance maps global regulatory Controls across Authority Documents covering Information Technology, Physical Security, Records Management, Privacy, and Third Party Supply Chain. To search Authority Documents we have mapped, follow this link over to our corporate site. To search Controls, go here. If you don’t see the regulation you need, request it here. Or ask our Professional Mapping Services team to map it for you.

How Will The CCH Help Me With My Compliance Challenges?
The Common Controls Hub helps you simplify and centralize your compliance efforts while reducing costs, time, and effort:

·Customization: Create your own custom framework and compile custom, harmonized Authority Document lists and Common Control lists in minutes. Select and create lists by specific vertical industries, market segments, geographies, or document search.
·Gap Analysis: Drastically reduce audit requirements (typically by as much as 60%) by comparing Authority Documents to find overlaps and gaps between regulations and eliminate redundant Controls. Understand the impact of new laws and standards and integrate new regulations easily without starting the entire process over.
·Audits: Audit once and attest multiple times. Compliance tasks and regulatory demands are often redundant across multiple requirements; with the CCH, you can eliminate duplicate efforts by asserting compliance across multiple Authority Documents simultaneously;
·Research: Drill down for detailed information, explanations, and sources for each Common Control
·Common Language: Helps IT teams, compliance pros, and lawyers understand each other easily
·Supply Chain Management: Reduce the complexity of monitoring and managing third-party and supply chain compliance to regulations. Route your compliance requirements to as many third-parties and supply chain members as needed and track their attestation with immediate reporting on their regulatory compliance adherence.

Why Compare Authority Documents?
Create a gap overlap analysis to drastically reduce audit requirements. You can quickly and easily compare any Authority Documents or AD lists. This is very useful for gap/overlap analysis and can also be used to gauge the impact of new initiatives, geographies, laws, and more. In order to reduce the burden (and cost) of compliance, you have to de-duplicate the mandates in the Authority Documents so they don’t overlap each other. When you compare Authority Documents or AD lists, and find the overlaps between the regulations, you can eliminate redundant Common Controls that show up in multiple regulations. Just comply once to them all simultaneously, which saves you lots of time and energy! Here’s how: Select Authority Documents or an AD list for Column A. This could be your “baseline” set of requirements. Pick ADs or an AD list for column B. This could represent your risk, a new initiative, a new law, a third party’s compliance profile and more. To see the overlap of Common Controls that are in both List A and List B, click on the arrow next to Both AB (and check out the information icon on the Common Controls for Both AB). Once you have your A/B comparison, just click Export Compare List and then click the Download button to copy it to your computer. To determine how much time and money you are saving by comparing Authority Documents, click the green dollar sign in the middle column, next to Controls. For step-by-step directions on how to compare Authority Documents and screenshots, just click here.

Track Your Progress And How It Relates To The Common Controls Hub?
One of the keys to a successful compliance campaign is tracking your compliance. This means gathering the necessary evidence that the multiple mandates your organization is required to follow are being completed. Instead of manually tracking Controls completion in spreadsheets, you can efficiently track it all online in the CCH. From the Workspace, just click the Tracking tab, select the Authority Document or list that contains the Controls you are working to comply with, and check the ‘Done’ or ‘Not Applicable’ checkbox; otherwise, incomplete Controls will still be on your To Do list. Instead of waiting for update status, you can conveniently check on your progress in your Dashboard Overview section. As soon as a team member or a third-party service provider or vendor completes a task and complies with the Control, they just click the checkbox and that status update is reflected in your Dashboard; you will clearly see what percentage of Controls are complete. Watch The CCH In Action Video Overviews Here’s a short 5-min overview of the Common Controls Hub. And a fast-paced, 30-min overview of how the Common Controls Hub and the UCF work together, including a full CCH demo.

FAQ

Test the UCF Common Controls Hub for free, now.