UCF Compliance Mapping Certificate Course
(ISC)2 Compliance Mapping Certificate Program
Compliance Mapping is serious business. It involves understanding sentence structures, grammar, terminological mapping, semantic relationships, and the various rules of term matching set forth by various ISO standards. (ISC)2 and the Unified Compliance team have joined forces to present this program.
Compliance Mapping is the process of matching one Citation’s Mandates to another Citation’s Mandates. An older methodology is from Citation to Citation in a matrix, with the newer methodology being each Citation to a Common Control in a star pattern. The process of compliance mapping consists of cataloging the Authority Document in question, extracting its pertinent Citations and Mandates, tagging the terms in those Mandates, selecting each tagged term’s in-context definition, mapping that tagged Mandate to a Common Control, and then matching the Common Control to corresponding Audit Questions as shown in the flow diagram below.
Through multimedia presentations, demonstrations and hands-on experiences, you will learn how to catalog Authority Documents, extract their pertinent Citations and Mandates, tag the terms in those Mandates, select each tagged term’s in-context definition, and then map that tagged Mandate to a Common Control. The goal of this training program is to prepare compliance mappers for the responsibility of mapping multiple Authority Documents correctly and accurately in a way that will satisfy auditors and regulators while simplifying governance for their organization or clients. After successful completion of the course, participants will be awarded the Compliance Mapping Certificate from (ISC)2, promoted to Mapper within the Unified Compliance Framework (UCF), and given full access to the UCF Mapper tool. There are currently seven modules for this course.
Students may take up to a year to complete the course, and must pass both the online quizzes and the practical-application projects.