Hello
We just upgraded from AC 5.3 to 10.1 and are going through the process of assigning our mitigating controls to rule IDs. This process has become tedious since the rule IDs do not match between 5.3 and 10.1. As of now we are manually identifying the assigned risks and transaction codes for one rule in 5.3. We take the risk and transaction code information and look for the same match in 10.1 to find the new rule ID for the mitigating control to be assigned to. This is quite time consuming which makes us feel there must be a better way to do this. I know there is a way to upload mass user and role assignment but is there a way upload rule ID / mitigation control assignment? Can anyone recommend a good way to compare mitigating controls assigned to rule IDs when the rule IDs are different?
Any assistance is appreciated.