Administration · Data & exports
Move compliance data in and out in standard formats.
Auditors, assessors and boards each want records in their own format. Venevor exports to machine-readable and everyday formats, and imports frameworks and records so you start from what you have.
- OSCAL
- export and import
- 4
- everyday export formats
1Machine-readable
OSCAL results and FedRAMP document foundations.
Assessment results export as OSCAL. FedRAMP SSP and POA&M foundation exports give your documentation a starting point drawn from the controls and evidence in Venevor.
What it does
Draw every export from the records your teams work in.
What it never does
Change the evidence behind an export.
2Everyday formats
CSV, PDF, Word and Excel across modules.
Lists and reports export to CSV, PDF, Word or Excel. Policies export as branded PDF or Word documents ready to share.
3Imports
Start from the frameworks and records you already have.
Import custom frameworks and OSCAL content, then map your controls to them. Risks, assets and policies can be bulk imported to get started.
Capabilities
What's included.
OSCAL assessment results
Export assessment results in OSCAL for tools that read it.
FedRAMP SSP foundation
Start a system security plan from the controls already in Venevor.
POA&M foundation
Start a plan of action and milestones from the gaps Venevor already tracks.
Branded policy documents
Export policies as branded PDF or Word documents.
Custom framework import
Import a custom framework or OSCAL content and map your controls to it.
Bulk import
Bring in risks, assets and policies in bulk.
Works with
Connected to the rest of Venevor.
FAQ
Common questions.
Are exports recorded?
Yes. Exports are written to the audit log with who ran them and when.
Is the FedRAMP export a finished SSP?
No. It is a foundation export: a starting point drawn from your controls and evidence that your team completes.
Can we import our own framework?
Yes. Import a custom framework or OSCAL content and map your controls to it.
See an OSCAL export from synthetic data.
We'll walk through exports and imports on a synthetic organization.