Does anyone have an already completed Excel template from Compliance-->Documents that is already filled out mapping a complete ISMS to the individual controls? I'm shocked that this isn't simply done in the app itself given ISMS is a core document for ISO 27001.
I am going through gaps on ISO 27001. Most of the control items which are currently listed as gaps are actually addressed by our ISMS which I'm about to upload. Unfortunately, since there are something like 50 of these items, I'd have to either upload the document 50 times, one per documentation line item, or go into the Documents section of compliance, pull down the Excel template, and manually go through all of the remaining items one at a time and add a mapping in the Excel. It seems to me that a better experience would be for Vanta to "know" that if the control needs an ISMS to be Green, that then uploading the ISMS does apply to all of them. I'm trying not to have manual work for the 50 or so items. Vanta chatbot said I'm out of luck except to use the Excel template. While I did submit it as a Feature Request, it doesn't help me today. If someone has already done that Excel mapping for ISO 27001, I'd love to have a copy and spare myself the manual work.
I think our approach to ISO 27001 documentation is a little different, so forgive me if my perspective is not completely aligned. Disclosure done, I would handle what your situation by uploading your ISMS (single document?) as a Document (or Policy, depending on the particulars of your use case) and then mapping the 50 controls that are supported by that Document. That solves the multi-upload situation, but still requires mapping the controls. This is tedious but much less work and less messy to maintain than uploading the same Document 50 times. There is an API solution for doing the mapping: API Mapping Workflow To link an existing document to a control programmatically, follow these steps: Retrieve IDs: You must first obtain the unique documentId and controlId for the items you wish to link. List controls using GET /controls.
List documents using GET /documents.
Execute the Mapping: Use the following POST endpoint to create the link:
Endpoint: POST /controls/{controlId}/documents.
Action: This adds a mapping between the specified control and document, effectively using the document as evidence for that control.
Yes, I want to avoid the manual work of doing that mapping though. If someone has already done the mapping and would share their XLSX, that's the ask here.
