Administration · Data & exports

Move compliance data in and out in standard formats.

Auditors, assessors and boards each want records in their own format. Venevor exports to machine-readable and everyday formats, and imports frameworks and records so you start from what you have.

OSCAL
export and import
4
everyday export formats

1Machine-readable

OSCAL results and FedRAMP document foundations.

Assessment results export as OSCAL. FedRAMP SSP and POA&M foundation exports give your documentation a starting point drawn from the controls and evidence in Venevor.

What it does

Draw every export from the records your teams work in.

What it never does

Change the evidence behind an export.

2Everyday formats

CSV, PDF, Word and Excel across modules.

Lists and reports export to CSV, PDF, Word or Excel. Policies export as branded PDF or Word documents ready to share.

3Imports

Start from the frameworks and records you already have.

Import custom frameworks and OSCAL content, then map your controls to them. Risks, assets and policies can be bulk imported to get started.

Capabilities

What's included.

  • OSCAL assessment results

    Export assessment results in OSCAL for tools that read it.

  • FedRAMP SSP foundation

    Start a system security plan from the controls already in Venevor.

  • POA&M foundation

    Start a plan of action and milestones from the gaps Venevor already tracks.

  • Branded policy documents

    Export policies as branded PDF or Word documents.

  • Custom framework import

    Import a custom framework or OSCAL content and map your controls to it.

  • Bulk import

    Bring in risks, assets and policies in bulk.

FAQ

Common questions.

Are exports recorded?

Yes. Exports are written to the audit log with who ran them and when.

Is the FedRAMP export a finished SSP?

No. It is a foundation export: a starting point drawn from your controls and evidence that your team completes.

Can we import our own framework?

Yes. Import a custom framework or OSCAL content and map your controls to it.

See an OSCAL export from synthetic data.

We'll walk through exports and imports on a synthetic organization.