Importing your own framework

Overview

Framework import lets you bring in your own framework, such as an internal AI policy, from an Excel file. You describe it as topics with their subtopics, one framework per file. Then you add it to a use case. There you assess each topic or subtopic with a status, owner, reviewer, approver, due date, evidence and linked risks.

Imported frameworks belong to your organization. Other organizations never see them.

Before you start

• Turn on the extension: An Admin enables Framework Import on the Extensions page. There is nothing to configure. Until then, none of the import controls appear.
• Organizational project: Import controls are on the Organizational Frameworks page, which needs an organization-level project. If the page says "No Organizational Project Found", create one first.
• Permission: Importing, re-importing and deleting need the "Import frameworks from a spreadsheet" permission (module Extensions). By default Admin and Editor have it.

Importing a framework

1. Click Frameworks in the sidebar.
2. In the Imported frameworks section, click Import from Excel. You can also use Manage frameworks > Import framework from Excel.
3. In the Import a framework from Excel dialog, click Download template to get framework_import_template.xlsx.
4. Fill in the template (see the format below) and save it.
5. Click Choose file and pick your file. A preview shows how many rows were found, with the first 5 rows.
6. Click Import framework.

When the import works, you see "Framework imported: N topic(s) and N subtopic(s)." The framework then appears under Imported frameworks with its topic and subtopic counts.

Spreadsheet format

• File type: Excel .xlsx only. Other files are refused with "Please upload an Excel file (.xlsx)".
• Worksheet: Only the first worksheet is read. Row 1 holds the column headers; data starts on row 2.
• One row per subtopic: Repeat the framework and topic on every row of that topic. To create a topic with no subtopics, leave the subtopic columns empty on its row.
• One framework per file: Every row must have the same framework name.
• Row limit: At most 5,000 rows. Empty rows are skipped and don't count.

Keep the template's header names. Columns marked * are required:

When an import fails

Every row is checked before anything is saved. If any row fails, nothing is imported and the dialog says "Nothing was imported. Fix the rows below in your file and upload it again." A table lists each problem with its Row (the row number in your spreadsheet), Field and Error. Problems that apply to the whole file, such as too many rows, show "-" as the row.

Common errors:

• "Framework name is required", "Topic number is required", "Topic name is required"
• "All rows must define the same framework"
• "Subtopic number is required when subtopic name is provided" (and the reverse)
• A topic number used with two different topic names, or a subtopic number repeated under the same topic. The message names the row where it first appeared.
• "A file can have at most 5000 rows; split the framework or remove empty rows"

Updating a framework

To change an imported framework, edit your file and import it again with the same framework name. Upper and lower case don't matter. VerifyWise updates the existing framework in place. Assessments on use cases are kept.

• Matching: Topics are matched by topic number. Subtopics are matched by subtopic number within their topic. Matched items take the names and descriptions from the file.
• New items: Rows with new numbers are added, including to every use case that already uses the framework.
• Missing items: An item no longer in the file is removed, unless some use case has assessment data on it (a status other than Not started, any text, owner, reviewer, approver, due date, evidence or linked risk). Those items are retired instead: they remain, marked Retired. A topic remains while one of its subtopics is retired. A retired item that comes back in a later file is restored.

The result reads "Framework updated: N added, N updated, N retired, N removed."

Adding an imported framework to a use case

1. Click Use cases in the sidebar and open the use case.
2. Open the Frameworks/regulations tab.
3. Click Manage frameworks/regulations (or Add Framework if the use case has none yet).
4. In the AI Frameworks dialog, scroll to Imported frameworks and click Add on the framework. It shows an Added badge.

The framework then appears in the use case's framework switcher next to the built-in ones. Adding or removing one needs permission to edit use cases, which Admin and Editor have by default. Imported frameworks can be added to use cases only, not to the organizational project.

Assessing an imported framework

Pick the framework in the use case's framework switcher. Topics and their subtopics are listed with a progress count, a status filter and a search box. Change an item's status straight from the list:

• Not started, Draft, In progress, Awaiting review, Awaiting approval, Implemented, Audited, Needs rework

Click an item to open its drawer:

• Details: Implementation description, status, owner, reviewer, approver, due date and auditor feedback
• Evidence: Upload evidence files
• Cross mappings: Link risks from this use case

Imported framework items have no Notes tab.

Removing an imported framework from a use case

In the AI Frameworks dialog, click Remove on the framework and confirm. This deletes its assessment in that use case (statuses, descriptions, owners, due dates, evidence links and risk links). This cannot be undone.

Deleting an imported framework

1. On the Frameworks page, click Delete next to the framework under Imported frameworks.
2. Click Delete in the "Delete this imported framework?" dialog.

The framework is removed with all its topics and subtopics. You can import it again from your file later.

If the extension is turned off

Disabling Framework Import hides the import controls and the Imported frameworks sections. Imported frameworks can no longer be added to use cases. Use cases that already use one keep it, and you can go on assessing it. Nothing is deleted.