Map a Citation
      Back to home
      1. Unified Compliance Knowledge Base
      2. Mapper Deep Dive
      3. Map a Citation

      Enter Citation Guidance

      As a rule, always copy the Citation guidance directly from the Authority Document.

      Rules of thumb

      Identifying Citations

      1. Do not map introductory material.
      2. Do not map notes or explanatory text.
      3. Do not map whole parenthetical sentences or paragraphs.

      Entering Citations

      1. Copy the Citation guidance directly from the Authority Document.
      2. Do no include lettering or numberings systems in Citation Guidance.
      3. Remove bullets from bulleted text and replace them with simple dashes.
      4. Enter bulleted text with preceding lines or paragraphs.
      5. Separate unnumbered paragraphs.

      Rules of thumb in action

      Introductory Material

      2. Australianpp19

      Australian Government Information Security Manual: Controls, 2016

      In the image above the entire page is introductory material and therefore not mappable.

      Notes, Explanatory Text, and Parenthetical Paragraphs

      2. Australianpp19

      Australian Government Information Security Manual: Controls, 2016

      In the image above the highlighted text areas are explanatory text and therefore not mappable.

      Exclude Lettering Systems

      3. DefenseSafegauding2 

      Defense Federal Acquisition Regulation Supplement and Procedures, Guidance, and Information, Part 204, Subpart 73, Safeguarding Covered Defense Information and Cyber Incident Reporting

       In the image above the lettering system (a) is left out of the Citation Guidance.

      Replace bulleted text with simple dashes

      4. PCIbulleted 2.1

      PCI DSS 3.1 SAQ B

       In the image above the highlighted bullet text is replaced with simple dashes when entered into the UCF Mapper.

      Enter bulleted text with preceding lines or paragraphs.

      5. ISOpp11

      ISO 22301: Societal Security - Business Continuity Management Systems - Requirements, Corrected Version

      In the image above the bulleted text is entered with the preceding paragraph.

      Separate unnumbered paragraphs.

      6. ISOpp9(2)
      ISO 22301: Societal Security - Business Continuity Management Systems - Requirements, Corrected Version

      In the image above the unnumbered paragraphs are entered separately. The first paragraph is entered into the Citation Guidance field.