CCI Importer

Overview

Import CCI data from XML files and map to security controls and/or objectives.

By default, maps CCIs to SecurityControl entities. Use --disable-objectives flag to also update ControlObjective.otherId fields with CCI mappings.

If no XML file is specified, defaults to packaged CCI_List.xml.

Configuration

This command reads the following keys from init.yaml. Any of them can also be supplied as an environment variable of the same name. See CLI Configuration File for the full reference.

cisaKev
domain
jcamAgencyDefinedHandling
jcamFieldMapping
jcamMappingProfile
jcamValueMapping
maxThreads
otx
timeout
token
userId

Usage

regscale cci_importer [OPTIONS]

Flag	Type	Required	Default	Description
`--xml_file, -f`	path	No	—	Path to the CCI XML file.
`--dry-run, -d`	boolean	No	`false`	Parse and display normalized data without saving to database
`--verbose, -v`	boolean	No	`false`	Display detailed output including all normalized CCI data
`--nist-version, -n`	choice	No	`5`	NIST 800-53 Revision version (default: 5) Choices: `4`, `5`
`--catalog-id, -c`	integer	No	`1`	ID of the catalog containing security controls (default: 1)
`--disable-objectives, -o`	boolean	No	`false`	Disable mapping CCIs to control objectives (updates otherId field)