---
title: Import Controls and Citations Group Data
slug: neurons-for-itsm/admin-user-help/enu/latest/import-controls-and-citations-group-data
createdAt: 2026-07-14T19:16:50.966Z
---

Before you create Authority Documents, import Citations and Controls via the **Data Import Wizard**.

Create Control Groups that align with current industry standards such as:

- FedRAMP 20x (Federal Risk and Authorization Management Program)
- ISO 27001:2022 (Information Security Management)
- ISO31000:2018 (Risk Management)
- NIST SP 800-53 (National Institute of Standards and Technology Special Publication)
- PCI DSS (Payment Card Industry Data Security Standard)
- GDPR (General Data Protection Regulation)

Citations are passages or expressions in a document that are quoted or cited and express a specific requirement from the Authority Document. Controls are the specific steps or actions within a compliance mandate that must be met to fulfill a compliance requirement. Controls can be mapped to multiple Citations from multiple Authority Documents.

**To import Citations and Controls:**

1. Set up the Data Import Connection.

:::Paragraph{indent="1"}
Refer to [Setting Up a Data Import Connection](docId\:z8kDIsU8GjFwJeWThqcUk).
:::

2. Use **Manual File Upload** for the **Connection Type** and upload the Excel spreadsheet.
3. The **Source Unique Key** is **ID**.
4. The **Target Business Object** is **GRC Citation**.
5. No **Filter Setting** is necessary.
6. Add a row for the **Reference ID**, and the corresponding field is **CitatationID**.
7. Click **Publish & Run Now**.

:::Paragraph{indent="1"}
This imports the data from an outside source into the Neurons for GRC database and creates new records. Each record needs a unique ID (**Control\_RecID** or **Citation\_RecID**).
:::

:::hint{type="info"}
You must have permissions for shared access to both the file (and its enclosing directories) and the Neurons for GRC server receiving the data.
:::