Organizational Template Information
As stated elsewhere templates are blank checklists made from DISA, Organizational, System Package, or even Custom Templates as a start. These templates can be used in OpenRMF® Professional to create checklists or to copy and create Organizational or System Package level templates. You can edit the Organizational Templates and save vulnerability and other detailed information. As you edit the template, the score is updated and the template is versioned so you can view historical changes.
Organizational templates are meant to serve as “standard templates” but for a company or organization. For example, DISA templates are not editable. They can only be used for other purposes. Organizational templates can be edited and updated with stanard / boilerplate status and details for use by all. You can also lock vulnerabilities so they are created in the checklist for your system package as locked from the beginning.
How Organizational Templates are Created
Organizational templates are not installed by default. They have to be made from DISA, CIS, Custom or other templates and copied into a Organizational template. Or they are uploaded from a current checklist file you already have as a basis.
Once a template is made every person using the OpenRMF® Professional installation can use a Organizational template. If you are an Administrator or Template Administrtor you also can upload a brand new organization template from the Template menu options.
What you can do with Organizational Templates
You can create new checklists from the Organizational Template and have information already filled out for that checklist. Add a hostname and other specific checklist data to save the new checklist into your system package. When any checklist file or audit compliance / SCAP scan is uploaded for that checklist type and hostname it will update that data, save the original checklist for historical record, and update all relevant scores per usual.
If you select one or more templates in the listing you can bulk download them all into a ZIP file locally. All the CKL files that you selected will be in that ZIP file. You also can create new checklists from them or copy to other Organizational or System Package templates.
Copying them to other Templates
Your Organizational Templates can also be copied into other templates for another Organizational or even System Package templates. System Package templates require you to have a “Create Template” group permission in that system or you will not see the option to copy to a system template. Once copied they are independent and can be updated and edited unto themselves. You may want to do this to customize templates as has been discussed in other areas of the help sections.
To edit, copy into or upload a organization template you must be in the Administrator or Template Administrator role.
Making new Checklists from Organizational Templates
If you have any “Create Checklist in a System” permissions you can select one or more Organizational templates from the listing and choose the “Create Checklist” from the bulk menu item just above the table listing to the right. If you click the Apply button you can choose the system and then a checklist of that type is created in that system.
You will need to update any information such as hostname, FQDN, role, and other data for the checklist inside the system listing. You will want to do this if you are trying to match this template up to a brand new SCAP scan as they match on STIG type and hostname / device name.