Agiliance Content License Information

Agiliance licenses content as Standard Content Packs and Advanced Content Packs, with content elements shown below. Standard Content Packs are included with any Agiliance RiskVision application license subscription or maintenance. Advanced Content Packs carry a separate fee.

	Standard Content	Advanced Content
Controls
Common Control Mapping
Suggested Guidelines for Evidence
Pre-created Questionnaires and Surveys
Audit and Executive Ready out-of-the -box Reports and Dashboards
Additional Documentation

Agiliance RiskVision contains a broad library of open source content that covers standards, regulations, and frameworks such as NIST, NERC, PCI DSS, FISMA, etc. Please refer to the content source categories to explore all available content options.

Agiliance will import third-party content on behalf of the customer if the publisher's license agreement permits. To utilize third-party licensed content not maintained by Agiliance, custom implementation may be required. Please contact your Agiliance representative for more details.

Please refer to the content sources listed below that may require third-party license fees and are not bundled in any of the Agiliance content packs. It is the customer's responsibility to secure the required license from GRC content publishers, including, but not limited to:

• ISO '27001' and ISO '27002' Content
• ISACA 'COBIT 4.1', 'Risk IT', and 'Val IT' Content
• BITS 'Shared Assessment' Content
• CIS (Center for Information Security) 'Benchmarks', 'Metrics', and 'Audit' Content/Tools
• PwC UK 'ISF' (Information Security Forum) Content and Tools
• PwC US 'TCS' (Technical Configuration Standards) Content
• HITRUST Alliance 'CSF' (Common Security Framework) Content
• Network Frontiers 'UCF' (Unified Compliance Framework) Content