Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

How to import the NIST 800-53 controls into Jira?

Don Coffey November 16, 2020

We would like to manage our Nist Security Controls in Jira and would;d like to import these but unable to identify the best way of doing this and would like input.

 

Thank you

DC

1 answer

0 votes
Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
November 16, 2020

You'll need to start by explaining what these controls are - a process, a bit of software, data to import etc?

Don Coffey November 16, 2020

Nic,

The NIST controls can be issuetypes and represent a comma delimited text data. These controls (over 1k) would be a manual effort to enter and looking for an import method. 

 

Have patience my Jira skills are improving...

 

Thanks

DC

Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
November 17, 2020

Ok, it's a bit weak keeping stuff in CSV in general, but for a one-off "getting started" run, that's perfectly normal.

Start at https://support.atlassian.com/jira-cloud-administration/docs/import-data-from-a-csv-file/ - it should not be hard to re-shape your CSV into something Jira can read, you're probably 95% of the way there already.

Don Coffey November 17, 2020

Nic,

I agree CSVs is not productive, Unfortunately the NIST only provides these in the excel formats. Admittedly this is no easy task and have been lookin at the format structure provided.

Cheers
Don

Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
November 17, 2020

I've been a bit dismissive there. 

I do know CSV is the greatest common divisor in the cases of a big table of data, and so it's going to work almost everywhere. There is absolutely nothing wrong with that.

I think what I was trying to get at was "use a massive CSV pile to get you started, then look at other, better, methods of updates".   Could your NIST reports dump out JSON that could be (easily manipulated and then) poked into Jira?  Just one idea, but I always lean towards automations.

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
PRODUCT PLAN
STANDARD
TAGS
AUG Leaders

Atlassian Community Events