hdr_logo_top.gif
hdr_logo_bottom.gif

The support site for the Unified Compliance Framework


The UCF Organizational Task and Record classification standard

The Organizational Task and Record Classification Standard is meant to be utilized after the organization has organized its records and files into categories. Building on the record categories, the organization then assigns them to tasks, grouping the tasks under the appropriate business function. The result is a complete roll up from data fields and records through categories, tasks, and business functions.

This document acts as the UCF's Task and Record Classification description standard for defining how to craft these documents directly from the UCF XML database so that as new, modified, or deleted controls or records are added to the UCF, the output can easily be updated.

The Organizational Task and Record Classification Standard

[image] [image]

A sample Organizational Task and Record Classification Standard

The contents of the Organizational Task and Record Classification Standard are as follows:

  1. The Task Title of the task in question.

  2. The Task ID of the task in question.

  3. The Name (and associated ID) of the Organizational Function the task is assigned to.

  4. The Task Description of the task in question.

  5. A roll-up list of all Record Categories, their descriptions, and associated File Examples (along with all associated IDs) mapped to this task.

  6. The Confidentiality, Integrity, and Availability levels, as well as

  7. any mitigating factors for raising those levels, associated with this task.

  8. A roll-up of the Retention Schedules and Triggers associated with this task.

Where does this information come from?

The information in this standard comes from the UCF's XML database. We'll repeat each of the fields here with a descriptor for where the information can be found within the XML specification documents. The Organizational Task Categories XML file can be found online

Information

Method

XML Source Field

Task Title

Direct

UCF_Task_Name

Task ID

Direct

UCF_Task_ID

Organizational Function Name

Calculated from the direct join to the Organizational Functions List

UCF_Function_ID

Task Description

Direct

UCF_Task_Description

Record Categories, their descriptions, and file examples

Calculated from the Tasks to Records Join List. Record examples calculated through the Recod Examples List

UCF_Record_ID, UCF_Record_Name, UCF_Record_Description for Record Categories. UCF_CE_Title and UCF_CE_ID for Record Examples.

Confidentiality, Integrity, and Availability

Direct

UCF_Task_Conf, UCF_Task_Conf_Description, UCF_Task_Integrity, UCF_Task_Integrity_Description, UCF_Task_Integrity, UCF_Task_Avail_Description

Confidentiality, Integrity, and Availability mitigating factors

Direct

UCF_Task_Conf_Special_Factor, UCF_Task_Integrity_Special_Factor, UCF_Task_Avail_Special_Factor

Retention Schedules and Triggers

Calculated from the Tasks to Records Join List

UCF_Record_Retention_Event and UCF_Record_Retention_Years

Post a comment

 
 
 
Recent Site Updates
The Asset taxonomy
The Vendor taxonomy
Minimum requirements for a valid Asset entry
Reviewing the Vendor List
The UCF Vendor XML format and schema