carlosmmatos / automate-compliance Goto Github PK

Primary Control Keys such as AC-1 that have additional subcontrols/enhancements should ensure that it doesn't have a narrative for the primary key.

Example output from Parser.data:

{CP-6  [{ Text only} {a Text for enhancement} {b Text for enhancement}] [] []  []  []}

should be:

{CP-6  [{a Text for enhancement} {b Text for enhancement}] [] []  []  []}

This is the end state OpenControl:

- control_key: CP-6
  standard_key: NIST-800-53
  covered_by: []
  implementation_status: not applicable
  narrative:
    - key: a
      text: |-
        Text for enhancement...
    - key: b
      text: |-
        Text for enhancement...
...

Figure out a way to convert the control id's in the spreadsheet to OpenControl. I May need to modify the spreadsheet as a last resort, but hopefully, we won't have to.

Here is what these controls can look like in their different formats: